Abstract
We present a simple, deterministic mathematical model for the spread of randomly scanning and bandwidth-saturating Internet worms. Such worms include Slammer and Witty, both of which spread extremely rapidly. Our model, consisting of coupled Kermack-McKendrick equations, captures both the measured scanning activity of the worm and the network limitation of its spread, i.e., the effective scan-rate per worm/infective. We fit our model to available data for the Slammer worm and demonstrate its ability to accurately represent Slammer's total scan-rate to the core.
Original language | English (US) |
---|---|
Pages (from-to) | 101-109 |
Number of pages | 9 |
Journal | Lecture Notes in Computer Science |
Volume | 3375 |
DOIs | |
State | Published - 2005 |
Event | Third International Workshop on Quality of Service in Multiservice IP Networks, QoS-IP 2005 - Catania, Italy Duration: Feb 2 2005 → Feb 4 2005 |
All Science Journal Classification (ASJC) codes
- Theoretical Computer Science
- Computer Science(all)