A hybrid quarantine defense

We study the strengths, weaknesses, and potential synergies of two complementary worm quarantine defense strategies under various worm attack profiles. We observe their abilities to delay or suppress infection growth rates under two propagation techniques and three scan rates, and explore the potential synergies in combining these two complementary quarantine strategies. We compare the performance of the individual strategies against a hybrid combination strategy, and conclude that the hybrid strategy yields substantial performance improvements, beyond what either technique provides independently. This result offers potential new directions in hybrid quarantine defenses. Categories and Subject Descriptors C.2 [Computer and Communication Networks]: Security and Protection

• Type: Conference
• Year: 2004
• Where: WORM
• Authors: Phillip A. Porras, Linda Briesemeister, Keith Skinner, Karl N. Levitt, Jeff Rowe, Yu-Cheng Allen Ting
• Keywords: Potential Synergies, Quarantine Defenses, Security Privacy, WORM 2004, Worm Quarantine Defense