Abstract

Internet worm spread is a phenomenon involving millions of hosts, who interact in complex and diverse environment. Scanning speed of each infected host depends on its resources and the defenses at work in its network. Aggressive worms further interact with the underlying Internet topology - the dynamics of the spread is constrained by the limited bandwidth of network links, and high-volume scan traffic leads to BGP router failure thus affecting global routing. Worm traffic also interacts with legitimate background traffic competing for (and often winning) the limited bandwidth resources. To faithfully simulate worm spread and other Internet-wide events such as DDoS, flash crowds and spam we need a detailed Internet model, a packet-level simulation of relevant event features, and a realistic model of background traffic on the whole Internet. The memory and CPU requirements of such simulation exceed a single …

Metadata

publication

Proceedings of the 19th Workshop on Principles of Advanced and Distributed …, 2005

year

2005

publication date

2005/6/1

authors

Songjie Wei, Jelena Mirkovic, Martin Swany

link

https://ieeexplore.ieee.org/abstract/document/1443312/

resource_link

https://citeseerx.ist.psu.edu/document?repid=rep1&type=pdf&doi=3976f8cc7e789b3606f74fb75f9f0ce16ee33c38

conference

Proceedings of the 19th Workshop on Principles of Advanced and Distributed Simulation

pages

71-79

publisher

IEEE Computer Society