This talk will start the series of presentations about malicious use of network. Abhishek and Vijay will lead the discussion: "WORMS: attacks, defenses and models." Abhishek will start with a taxonomy of network worms, going thru the details of some of the most successful malcodes, and giving insights of what makes these worms a major security concern. From that point, Vijay will present what are the state-of-the-art defenses against worms, and models to predict their spread and destructive power. This tutorial-like presentation is based on the non-exhaustive list of papers bellow: - N. Weaver, V. Paxson, S. Staniford and R. Cunningham, "A Taxonomy of Computer Worms", Proc. ACM CCS Workshop on Rapid Malcode, October 2003. http://www.cs.berkeley.edu/~nweaver/papers/taxonomy.pdf - N. Weaver, S. Staniford and V. Paxson, "Very Fast Containment of Scanning Worms", USENIX Security Symposium 2004. http://www.icsi.berkeley.edu/~nweaver/containment/ - Stuart Staniford, Vern Paxson and Nicholas Weaver "How to 0wn the Internet in Your Spare Time", in the Proceedings of the 11th USENIX Security Symposium (Security '02) http://www.icir.org/vern/papers/cdc-usenix-sec02/ - Cliff Changchun Zou, Weibo Gong, Don Towsley "Worm Propagation Modeling and Analysis under Dynamic Quarantine Defense", in WORM 2003 http://www-unix.ecs.umass.edu/~gong/papers/dynamicQuarantine.pdf - Michael Liljenstam, Yougu Yuan, BJ Premore and David Nicol "A Mixed Abstraction Level Simulation Model of Large Scale Internet Worm Infestation" http://www.cs.dartmouth.edu/~nicol/papers-cv/mascots2002.pdf - Nicholas Weaver and Vern Paxson, "A Worst-Case Worm", Proceedings of the third annual Workshop on Economics and Information Security (WEIS04), 2004 http://www.dtc.umn.edu/weis2004/weaver.pdf Usefull links: - http://www.icir.org/vern/papers.html - http://www.cs.ucsd.edu/users/savage/