Very Fast Containment of Scanning Worms
By Nicholas C. Weaver, Stuart Staniford-Chen, Vern Paxson. USENIX Security Symposium, 2004
317 citations recorded by the source corpus.
View Paper: https://www.semanticscholar.org/paper/d53323f86f5aa8894c95a851c7658208f4fb8b68
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
- Roberto Perdisci
- Wenke Lee
- Miguel Oom Temudo de Castro
- Christopher Krügel
- Engin Kirda
- Manuel Costa
- Manos Antonakakis
- Battista Biggio
Citations in the corpus
- The monitoring and early detection of Internet worms (2005, unknown): “Our trend detection system attempts to detect the dynamic trend of monitored traf.c based on the fact that, at the early stage, a worm propagates exponentially with a constant, positive exponential rate.”
- Modeling Botnet Propagation Using Time Zones (2006, methodology): “Improvements belonging to the rst category can be found in more recent analysis such as [SM04], which traced signicant worm outbreaks, and [ZTGC05,WPSC03, WSP04 ], which examined a specic type of routed worm, and [ZTG04], which examines specic types of propagation (e.g., e-mail).”
- Polymorphic Worm Detection Using Structural Information of Executables (2005, background): “Most prominently, this behavior manifests itself as a large number of (often failed) connection attempts [24, 26].”
- Shield: vulnerability-driven network filters for preventing known vulnerability exploits (2004, methodology): “The containment method | blocking the detected scanning activity of compromised nodes [ 46 ] | has also been explored as a weapon against scanning worms.”
- Fast Detection of Scanning Worm Infections (2004, methodology): “Solutions for managing the added memory requirements imposed by this approach have been explored by Weaver, Staniford, and Paxson [ 26 ].”
- Vigilante: end-to-end containment of internet worms (2005, background): “[46] Weaver, N., Staniford, S., and Paxson, V.”
- Detecting Malware Domains at the Upper DNS Hierarchy (2011, background): “Several studies provide deep understanding behind the properties of malware propagation and botnet’s life-time [7, 25, 29].”