A Snapshot of Global Internet Worm Activity

摘要: In this paper, we present a snapshot of Internet worm activity from September to November 2001, bearing witness the rise Nimda (and Nimda.E), death CodeRedII CodeRed.d), and resurrection original CodeRed. We determine demographics various worm-infected populations, make predictions as their future growth, attrition, impact. These findings represent early results our ongoing research in “blackhole monitoring” – instrumentation analysis an unused class A network, or 1/256 entire address space, for evidence global attack activity.