Coupled Kermack-McKendrick models for randomly scanning and bandwidth-saturating internet worms

George Kesidis; Ihab Hamadeh; Soranun Jiwasurat

doi:10.1007/978-3-540-30573-6_8

Coupled Kermack-McKendrick models for randomly scanning and bandwidth-saturating internet worms

George Kesidis, Ihab Hamadeh, Soranun Jiwasurat

Research output: Contribution to journal › Conference article › peer-review

16 Scopus citations

Abstract

We present a simple, deterministic mathematical model for the spread of randomly scanning and bandwidth-saturating Internet worms. Such worms include Slammer and Witty, both of which spread extremely rapidly. Our model, consisting of coupled Kermack-McKendrick equations, captures both the measured scanning activity of the worm and the network limitation of its spread, i.e., the effective scan-rate per worm/infective. We fit our model to available data for the Slammer worm and demonstrate its ability to accurately represent Slammer's total scan-rate to the core.

Original language	English (US)
Pages (from-to)	101-109
Number of pages	9
Journal	Lecture Notes in Computer Science
Volume	3375
DOIs	https://doi.org/10.1007/978-3-540-30573-6_8
State	Published - 2005
Event	Third International Workshop on Quality of Service in Multiservice IP Networks, QoS-IP 2005 - Catania, Italy Duration: Feb 2 2005 → Feb 4 2005

All Science Journal Classification (ASJC) codes

Theoretical Computer Science
Computer Science(all)

Access to Document

10.1007/978-3-540-30573-6_8

Cite this

@article{3d86e01b92664d3fa621d8c339d6e45c,

title = "Coupled Kermack-McKendrick models for randomly scanning and bandwidth-saturating internet worms",

abstract = "We present a simple, deterministic mathematical model for the spread of randomly scanning and bandwidth-saturating Internet worms. Such worms include Slammer and Witty, both of which spread extremely rapidly. Our model, consisting of coupled Kermack-McKendrick equations, captures both the measured scanning activity of the worm and the network limitation of its spread, i.e., the effective scan-rate per worm/infective. We fit our model to available data for the Slammer worm and demonstrate its ability to accurately represent Slammer's total scan-rate to the core.",

author = "George Kesidis and Ihab Hamadeh and Soranun Jiwasurat",

year = "2005",

doi = "10.1007/978-3-540-30573-6_8",

language = "English (US)",

volume = "3375",

pages = "101--109",

journal = "Lecture Notes in Computer Science",

issn = "0302-9743",

publisher = "Springer Verlag",

note = "Third International Workshop on Quality of Service in Multiservice IP Networks, QoS-IP 2005 ; Conference date: 02-02-2005 Through 04-02-2005",

}

TY - JOUR

T1 - Coupled Kermack-McKendrick models for randomly scanning and bandwidth-saturating internet worms

AU - Kesidis, George

AU - Hamadeh, Ihab

AU - Jiwasurat, Soranun

PY - 2005

Y1 - 2005

N2 - We present a simple, deterministic mathematical model for the spread of randomly scanning and bandwidth-saturating Internet worms. Such worms include Slammer and Witty, both of which spread extremely rapidly. Our model, consisting of coupled Kermack-McKendrick equations, captures both the measured scanning activity of the worm and the network limitation of its spread, i.e., the effective scan-rate per worm/infective. We fit our model to available data for the Slammer worm and demonstrate its ability to accurately represent Slammer's total scan-rate to the core.

AB - We present a simple, deterministic mathematical model for the spread of randomly scanning and bandwidth-saturating Internet worms. Such worms include Slammer and Witty, both of which spread extremely rapidly. Our model, consisting of coupled Kermack-McKendrick equations, captures both the measured scanning activity of the worm and the network limitation of its spread, i.e., the effective scan-rate per worm/infective. We fit our model to available data for the Slammer worm and demonstrate its ability to accurately represent Slammer's total scan-rate to the core.

UR - http://www.scopus.com/inward/record.url?scp=24144441166&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=24144441166&partnerID=8YFLogxK

U2 - 10.1007/978-3-540-30573-6_8

DO - 10.1007/978-3-540-30573-6_8

M3 - Conference article

AN - SCOPUS:24144441166

SN - 0302-9743

VL - 3375

SP - 101

EP - 109

JO - Lecture Notes in Computer Science

JF - Lecture Notes in Computer Science

T2 - Third International Workshop on Quality of Service in Multiservice IP Networks, QoS-IP 2005

Y2 - 2 February 2005 through 4 February 2005

ER -

Coupled Kermack-McKendrick models for randomly scanning and bandwidth-saturating internet worms

Abstract

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this