SRI Logo
About Us|R and D Divisions|Careers|Newsroom|Contact Us|SRI Home
     
  SRI Logo

Automatically Deducing Propagation Sequences that Circumvent a Collaborative Worm Defense
 by Dr. Linda Briesemeister & Dr. Phillip Porras.

Abstract
We present an approach to the question of evaluating worm defenses against future, yet unseen, and possibly defense-aware worm behavior. Our scheme employs model checking to produce worm propagation sequences that defeat a worm defense of interest. We demonstrate this approach using an exemplar collaborative worm defense, in which LANs share alerts about encountered infections. Through model checking experiments, we then generate propagation sequences that are able to infect the whole population in the modeled network. We discuss these experimental results and also identify open problems in applying formal methods more generally in the context of worm quarantine research.
BibTEX Entry
@INPROCEEDINGS{briesemeister:malware:2006,
  AUTHOR = {Linda Briesemeister and Phillip A. Porras},
  TITLE = {Automatically Deducing Propagation Sequences that Circumvent a Collaborative Worm Defense},
  BOOKTITLE = {Proceedings of the 25th International Performance Computing and Communications Conference (Workshop on Malware)},
  PAGES = {587--592},
  YEAR = {2006},
  MONTH = {April},
} 
Files
 













 

About Us  |  R&D Divisions  |  Careers  |  Newsroom  |  Contact Us
© 2017 SRI International 333 Ravenswood Avenue, Menlo Park, CA 94025-3493
SRI International is an independent, nonprofit corporation. Privacy policy