TY - GEN
T1 - Stochastic behavior of random constant scanning worms
AU - Rohloff, Kurt R.
AU - Başar, Tamer
PY - 2005
Y1 - 2005
N2 - This paper discusses modeling and simulation issues associated with the stochastic behavior of a special type of a computer worm called a Random Constant Scanning (RCS) worm. Although these worms propagate by randomly scanning network addresses to find hosts that are susceptible to infection, traditional RCS worm models are fundamentally deterministic. A density-dependent Markov jump process model for RCS worms is presented and analyzed. Conditions are shown for when worm models can safely ignore some stochastic properties of RCS worm propagation. A computationally simple hybrid deterministic/stochastic model for the observed scanning behavior on a local network due to the global propagation of an RCS scanning worm is also presented and discussed.
AB - This paper discusses modeling and simulation issues associated with the stochastic behavior of a special type of a computer worm called a Random Constant Scanning (RCS) worm. Although these worms propagate by randomly scanning network addresses to find hosts that are susceptible to infection, traditional RCS worm models are fundamentally deterministic. A density-dependent Markov jump process model for RCS worms is presented and analyzed. Conditions are shown for when worm models can safely ignore some stochastic properties of RCS worm propagation. A computationally simple hybrid deterministic/stochastic model for the observed scanning behavior on a local network due to the global propagation of an RCS scanning worm is also presented and discussed.
UR - http://www.scopus.com/inward/record.url?scp=33748372756&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=33748372756&partnerID=8YFLogxK
U2 - 10.1109/ICCCN.2005.1523881
DO - 10.1109/ICCCN.2005.1523881
M3 - Conference contribution
AN - SCOPUS:33748372756
SN - 0780394283
SN - 9780780394285
T3 - Proceedings - International Conference on Computer Communications and Networks, ICCCN
SP - 339
EP - 344
BT - Proceedings - 14th International Conference on Computer Communications and Networks, ICCCN 2005
T2 - 14th International Conference on Computer Communications and Networks, ICCCN 2005
Y2 - 17 October 2005 through 19 October 2005
ER -