Throttling viruses: restricting propagation to defeat malicious mobile code

By Matthew M. Williamson. 18th Annual Computer Security Applications Conference, 2002. Proceedings., 2002

414 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/507e3ea7e3e7cf563906d7240a2f170c2075dccb

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Information Systems

In Signal Processing

Citations in the corpus

Revisiting Traffic Anomaly Detection Using Software Defined Networking (2011, methodology): “Unlike TRW-CB and Rate Limiting, Maximum Entropy relies on examining every packet in order to build packet class distributions every t seconds.”
Polymorphic Worm Detection Using Structural Information of Executables (2005, background): “One technique is based on rate limits for outgoing connections [28].”
Argos: an emulator for fingerprinting zero-day attacks for advertised honeypots with automatic signature generation (2006, background): “Existing automated response systems tend to incur a fairly large ratio of false positives in attack detection and use of signatures [43, 37, 23, 15, 27].”
Behavior of Machine Learning Algorithms in Adversarial Environments (2010, methodology): “In the final stage of detection, messages deemed to be viral by our naive Bayes classifier were used to make a quarantine decision building on strategies by Williamson [2002] to throttle the spread of viruses.”
A taxonomy of DDoS attack and DDoS defense mechanisms (2004, background): “Examples of system security mechanisms include monitored access to the machine [71], applications that download and install security patches, firewall systems [49], intrusion detection systems [6], and worm defense systems [73].”
DDoS Attack Detection and Mitigation Using SDN: Methods, Practices, and Solutions (2017, background): “It utilizes a threshold to limit the number of new connection attempts within a certain time period [64,65].”
A Behavior-Based Approach to Securing Email Systems (2003, background): “A recent paper [14] notes the same strategy.”
Internet quarantine: requirements for containing self-propagating code (2003, background): “A more compelling approach for slowing the spread of a worm is the per-host " throttling " described by Williamson [17].”
Shield: vulnerability-driven network filters for preventing known vulnerability exploits (2004, background): “Rate-limiting [48] is another containment method that throttles the sending rate at an infected end host.”