« Addressing Malicious SMTP-based Mass-Mailing Activity Within an Enterprise Network | Main | Defending against Hitlist Worms using Network Address Space Randomization »

Worm propagation strategies in an IPv6 Internet

I like this paper, not only because it dispells a myth but it's also the same line of arguments I've been using for years. Thanks to Ismael for the tip. 

We discuss a number of strategies worms could use in an IPv6-based Internet to find new targets. We separate these into two categories, wide-area and local-area searches, somewhat mirroring the IPv6 address architecture. We argue that worms will use different types of information sources to first determine existing networks and establish a presence there, and then spread locally inside an organization. We hope to illustrate that simple reliance on the IPv6 address space for protection against scanning worms is not a wise defensive strategy, and we suggest areas where research could assist in detecting and limiting future worm propagation.

Source: worm propagation strategies in an IPv6 Internet, Steven M. Bellovin, Bill Cheswick, and Angelos D. Keromytis.

February 11, 2006 in IPv6, papers | Permalink
Tell others: digg submit | del.icio.us this | Reddit

Comments

Nice Blog :)

www.FriendsterForum.com

Posted by: FriendsterForum.com | Feb 11, 2006 10:30:13 PM

The comments to this entry are closed.