Defense and Detection Strategies
against Internet Worms
For quite a long time, computer security was a rather narrow field of
study that was populated mainly by theoretical computer scientists, electri-
cal engineers, and applied mathematicians. With the proliferation of open
systems in general, and of the Internet and the World Wide Web (WWW) in
particular, this situation has changed fundamentally. Today, computer and
network practitioners are equally interested in computer security, since they
require technologies and solutions that can be used to secure applications
related to electronic commerce. Against this background, the field of com-
puter security has become very broad and includes many topics of interest.
The aim of this series is to publish state-of-the-art, high standard technical
books on topics related to computer security. Further information about the
series can be found on the WWW at the following URL:
http://www.esecurity.ch/serieseditor.html
Also, if you’d like to contribute to the series by writing a book about a topic
related to computer security, feel free to contact either the Commissioning
Editor or the Series Editor at Artech House.
For a listing of recent titles in the Artech House
Computer Security Series, turn to the back of this book.
Defense and Detection Strategies
against Internet Worms
Jose Nazario
Artech House
Boston • London
www.artechhouse.com
Library of Congress Cataloging-in-Publication Data
A catalog record of this book is available from the U.S. Library of Congress.
British Library Cataloguing in Publication Data
Nazario, Jose
Defense and detection strategies against Internet worms. —
(Artech House computer security library)
1. Computer viruses 2. Computer networks — Security measures 3. Internet — Security measures
I. Title
005.8’4
ISBN 1-58053-537-2
Cover design by Yekaterina Ratner
© 2004 ARTECH HOUSE, INC.
685 Canton Street
Norwood, MA 02062
All rights reserved. Printed and bound in the United States of America. No part of this book may be reproduced
or utilized in any