loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
19th Annual Computer Security Applications Conference (ACSAC '03)
Design, Implementation and Test of an Email Virus Throttle
Las Vegas, Nevada
December 08-December 12
ISBN: 0-7692-2041-3
Matthew M. Williamson, HP Labs Bristol, UK
This paper presents an approach to preventing the damage caused by viruses that travel via email. The approach prevents an infected machine spreading the virus further. This directly addresses the two ways that viruses cause damage: less machines spreading the virus will reduce the number of machines infected and reduce the traffic generated by the virus.
The approach relies on the observation that normal emailing behaviour is quite different from the behaviour of a spreading virus, with the virus sending messages at a much higher rate, to different addresses. To limit propagation a rate-limiter or virus throttle is described that does not affect normal traffic, but quickly slows and stops viral traffic. The paper includes an analysis of normal emailing behaviour, and details of the throttle design. In addition an implementation is described and tested with real viruses, showing that the approach is practical.
Citation:
Matthew M. Williamson, "Design, Implementation and Test of an Email Virus Throttle," acsac, pp.76, 19th Annual Computer Security Applications Conference (ACSAC '03), 2003
Usage of this product signifies your acceptance of the Terms of Use.