On the performance of internet worm scanning strategies

摘要: In recent years, fast spreading worms, such as Code Red, Slammer, Blaster and Sasser, have become one of the major threats to security Internet. order defend against future it is important first understand how worms propagate different scanning strategies affect worm propagation dynamics. this paper, we systematically model analyze under various strategies, uniform scan, routing hit-list cooperative local preference sequential divide-and-conquer target etc. We also provide an analytical accurately Witty worm's destructive behavior. By using same modeling framework, reveal underlying similarity relationship between strategies. addition, based on our simulation analysis monitoring, a guideline for building better monitoring infrastructure.