Worm anatomy and model

We present a general framework for reasoning about network worms and analyzing the potency of worms within a specific network. First, we present a discussion of the life cycle of a worm based on a survey of contemporary worms. We build on that life cycle by developing a relational model that associates worm parameters, attributes of the environment, and the subsequent potency of the worm. We then provide a worm analytic framework that captures the generalized mechanical process a worm goes through while moving through a specific environment and its state as it does so. The key contribution of this work is a worm analytic framework. This framework can be used to evaluate worm potency and develop and validate defensive countermeasures and postures in both static and dynamic worm conflict. This framework will be implemented in a modeling and simulation language in order to evaluate the potency of specific worms within an environment. Categories and Subject Descriptors K.6.5 [Security and...

• Type: Conference
• Year: 2003
• Where: WORM
• Authors: Dan Ellis
• Keywords: Life Cycle, Security Privacy, Worm, WORM 2003, Worm Analytic Framework