loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
20th Annual Computer Security Applications Conference (ACSAC'04)
High-Fidelity Modeling of Computer Network Worms
Tucson, Arizona
December 06-December 10
ISBN: 0-7695-2252-1
Kalyan S. Perumalla, Georgia Institute of Technology, Atlanta, Georgia
Srikanth Sundaragopalan, Georgia Institute of Technology, Atlanta, Georgia
Abstract modeling, such as using epidemic models, has been the general method of choice for understanding and analyzing the high-level effects of worms. However, high-fidelity models, such as packet-level models, are indispensable for moving beyond aggregate effects, to capture finer nuances and complexities associated with known and future worms in realistic network environments. Here, we first identify the spectrum of available alternatives for worm modeling, and classify them according to their scalability and fidelity. Among them, we focus on three high-fidelity methods for modeling worms, and study their effectiveness with respect to scalability. Employing these methods, we are then able to, respectively, achieve some of the largest packet-level simulations of worm models to date; implant and attack actual worm monitoring/defense installations inside large simulated networks; and identify a workaround for real-time requirement that fundamentally constrains worm modeling at the highest fidelity levels.
Citation:
Kalyan S. Perumalla, Srikanth Sundaragopalan, "High-Fidelity Modeling of Computer Network Worms," acsac, pp.126-135, 20th Annual Computer Security Applications Conference (ACSAC'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.