Experiences with worm propagation simulations

Fast Internet worms are a relatively new threat to Internet infrastructure and hosts. We discuss motivation and possibilities to study the behaviour of such worms and degrees of freedom that worm writers have. To facilitate the study of fast worms we have designed a simulator. We describe the design of this simulator and discuss practical experiences we have made with it and compare observation of past worms with simulated behaviour. One specific feature of the simulator is that the Internet model used can represent network bandwidth and latency constraints. Categories and Subject Descriptors D.4.6 [Operating Systems]: Security and Protection—Invasive software (e.g., viruses, worms, Trojan horses); K.6.5 [Management of Computing and Information Systems]: Security and Protection—Invasive software (e.g., viruses, worms, Trojan horses); I.6 [Computing Methodologies]: Simulation and Modeling General Terms Security Keywords Internet Worms, Simulation, Bandwidth, Latency

• Type: Conference
• Year: 2003
• Where: WORM
• Authors: Arno Wagner, Thomas Dübendorfer, Bernhard Plattner, Roman Hiestand
• Keywords: Fast Worms, Keywords Internet Worms, Past Worms, Security Privacy, WORM 2003