Internet worms are an emerging threat to Internet hosts and
infrastructure. It is important thus, to study and understand
their behavior in order to be able to build efficient systems
that can detect them and stop their propagation.

The main problem in studying the behavior of internet worms
is that real world experiments can not be performed. Researchers
can not create and release a worm on the Internet just to take
measurements.

In this talk we explore how we can build realistic simulators for worms. 

Worms usually affect the whole Internet.
Building a system to capture the Internet's behavior is a challenging problem
by itself. We  investigate what simplifications and assumptions are reasonable
while simulating worm behavior and how to validate the correctness of the model.

Here is the list of papers upon which this talk is based:

• Experiences with worm propagation Simulations by A. Wagner et al.
• Simulating Realistic Network Worm Traffic for Worm Warning System design and testing by M. Liljenstam et al.
• Internet Quarantine: Requirements for Containing Self-Propagating Code by D. Moore et al.