• DocumentCode
    1902936
  • Title

    And you though you were safe after SLAMMER, not so, swarms not Zombies present the greatest risk to our national Internet infrastructure

  • Author

    Osorio, Fernando C Colón ; Klopman, Zachi

  • Author_Institution
    Wireless Syst. Security Res. Lab., Marlboro, MA
  • fYear
    2006
  • fDate
    10-12 April 2006
  • Lastpage
    552
  • Abstract
    The problem of attacks where sophisticated communities, such as BLACKHAT users, compromised larger and larger number of unsuspecting (and unsuspected) home personal computers in an effort to launch major attacks on both Government and corporate networks are addressed in this manuscript. We called these attacks "swarm attacks", like a "swarm of bees". The SLAMMER, which is currently the fastest computer worm in recorded history, is an early precursor to this class of threat. Most proposed countermeasures strategies proposed to deal with such attacks, are based primarily on rate detection and limiting algorithms, or the detection of a sudden increased occurrence of "destination unreachable" messages in a network. However, we speculate that such strategies will prove ineffective in the future. In this manuscript we introduce the basic principles behind the idea of such "swarm worms", the nature of the intelligent behavior that emerges, as well as the basic structure required in order to be considered a "swarm worm", based on our definition. We present preliminary results on the propagation speeds of one such swarm worm, called the ZachiK worm. It is shown that ZachiK is capable of propagating at a rate 2 orders of magnitude faster than similar worms without swarm capabilities
  • Keywords
    Internet; computer crime; intranets; invasive software; telecommunication security; BLACKHAT; SLAMMER; ZachiK worm; Zombies; computer worm; corporate networks; destination unreachable messages; home personal computers; national Internet infrastructure; swarm attacks; swarm worms; Communication system security; Computer security; Computer worms; History; IP networks; Internet; Intrusion detection; Laboratories; Microcomputers; National security;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Performance, Computing, and Communications Conference, 2006. IPCCC 2006. 25th IEEE International
  • Conference_Location
    Phoenix, AZ
  • Print_ISBN
    1-4244-0198-4
  • Type

    conf

  • DOI
    10.1109/.2006.1629451
  • Filename
    1629451