On the functional validity of the worm-killing worm

Hyogon Kim, Inhye Kang

Research output: Contribution to journalConference article

4 Citations (Scopus)

Abstract

The notion of worm-killing worm has been in the folklore for some time. However the obvious fear of the killer worm itself being compromised, or of any self-propagating code set loose (possibly over administrative boundaries), has barred serious exploration on the practical aspects of the idea. In this paper, we suspend such concerns momentarily, and investigate its functional validity. This effort is motivated by recent fast worm epidemics exemplified by that of SQL Slammer, which was overwhelmingly faster than traditional human-intervened response. Specifically, this paper evaluates the killer worm in terms of the prevention effect and the incurred traffic cost. Above and beyond, we consider supplementary techniques that could boost the performance and mitigate the harmful side-effects of the worm-killing worm.

Original languageEnglish
Pages (from-to)1902-1906
Number of pages5
JournalIEEE International Conference on Communications
Volume4
Publication statusPublished - 2004
Event2004 IEEE International Conference on Communications - Paris, France
Duration: 2004 Jun 202004 Jun 24

Keywords

  • Bandwidth
  • Epidemic
  • Prevention
  • Speed
  • Worm

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Electrical and Electronic Engineering

Fingerprint Dive into the research topics of 'On the functional validity of the worm-killing worm'. Together they form a unique fingerprint.

Cite this