Defense and Detection Strategies against Internet Worms; Contents vii; Foreword xvii; Preface xxi; Acknowledgments xxvii; 1 Introduction 1; 2 Worms Defined 11; 3 Worm Traffic Patterns 23; 4 Worm History and Taxonomy 37; 5 Construction of a Worm 69; 6 Infection Patterns 83; 7 Targets of Attack 103; 8 Possible Futures for Worms 113; 9 Traffic Analysis 137; 10 Honeypots and Dark (Black Hole) Network Monitors 161; 11 Signature-Based Detection 175; 12 Host-Based Defenses 211; 13 Firewall and Network Defenses 233; 14 Proxy-Based Defenses 245; 15 Attacking the Worm Network 257; 16 Conclusions 269
Summary
This is the first book focused exclusively on Internet worms, offering you solid worm detection and mitigation strategies for your work in the field. This ground-breaking volume enables you to put rising worm trends into perspective with practical information in detection and defense techniques utilizing data from live networks, real IP addresses, and commercial tools. The book helps you understand the classifications and groupings of worms, and offers a deeper understanding of how they threaten network and system security
