| Publisher | University of Massachusetts | ||
|---|---|---|---|
| Format | 149.3KB PDF | Date added | 10 Nov 2003 |
| Topics | Anti-Hacking, Anti-Virus | ||
| Downloads | 39 | ||
Most well-known Internet worms, such as Code Red, Slammer, and Blaster, infected vulnerable computers by scanning the entire Internet IPv4 space. This paper presents a new scan-based worm called "Routing worm", which can use information provided by BGP routing tables to reduce its scanning space without ignoring any potential vulnerable computer. A routing worm can propagate twice to more than three times faster than a traditional worm. In addition, the geographic information of allocated IP addresses, especially BGP routing prefixes, enables a routing worm to conduct fine-grained selective attacks: hackers or terrorists can selectively impose heavy damage to vulnerable computers in a specific country, an Internet Service Provider, or an Autonomous System, without much collateral damage done to others.
Related white papers
What every E-buisness should know about SSL security and customer trust
Fear of fraud is well founded, Gartner reports nearly 2 million Americans were victims of fraud over the internet during a recent 12 month period. Gaining the trust of online...
Trend Micro Enterprise Security white paper
This white paper reviews the content security threat landscape and how it has evolved into a more dangerous and high risk environment. The paper discussed how conventional content security approaches...
Smart Protection E-Book
"Outthink the Threat: Why conventional protection is no match for new data-stealing malware & the Trend Micro Smart Protection Network is." Discover how cyber criminals are rendering traditional security solutions...
Trend Micro Web Threats WP
Web threats pose a broad range of risks, including financial damages, identity theft, loss of confidential business information, theft of network resources, damaged brand or personal reputation, and erosion of...
The Past, Present and Future of Whitelisting
The explosion in malware and zero-day vulnerabilities over the last several years has limited the effectiveness of blacklisting technology. While still important, it must be augmented with other technologies such...
Moving Beyond AV to Ensure Secure and Compliant Endpoints
In today's Web 2.0 world, software is more distributed than ever before. Employees download a variety of Internet applications on a regular basis, with each new download altering system configurations...
High-performance protection at the network edgewhat, why and how
With more demands being put on lightweight network-edge hardware to provide security and connectivity, combining simplified malware detection with URI filtering can offer excellent proactive protection without overburdening the hardware...



