An Automated Defense System to Counter Internet Worms

摘要: Our society is highly dependent on network services such as the Web, email, and collaborative P2P enterprise applications. But what if infrastructures were suddenly torn down? Both past incidents research studies show that a well-engineered Internet worm can accomplish task in fairly simple way and, most notably, matter of few minutes. This clearly rules out possibility manually countering outbreaks. We present testbed operates cluster computers emulates very large networks for purposes experimentation. A wide variety properties be studied topologies interest constructed. reactive control system, based Willow architecture, top provides monitor/analyze/respond approach to deal with infections automatically. The logic driving system synthesized from formal specification, which correlate sensor events. Details our configurable testbed, theory operation features specification language, various experimental performance results are presented. Index Terms worm, emulation platform, defense control, policy Submission category Regular paper Approximate word count 10510 material included this has been cleared through authors’ affiliations