« Addressing Malicious SMTP-based Mass-Mailing Activity Within an Enterprise Network | Main | Defending against Hitlist Worms using Network Address Space Randomization »
Worm propagation strategies in an IPv6 Internet
I like this paper, not only because it dispells a myth but it's also the same line of arguments I've been using for years. Thanks to Ismael for the tip.
We discuss a number of strategies worms could use in an IPv6-based Internet to find new targets. We separate these into two categories, wide-area and local-area searches, somewhat mirroring the IPv6 address architecture. We argue that worms will use different types of information sources to first determine existing networks and establish a presence there, and then spread locally inside an organization. We hope to illustrate that simple reliance on the IPv6 address space for protection against scanning worms is not a wise defensive strategy, and we suggest areas where research could assist in detecting and limiting future worm propagation.
Source: worm propagation strategies in an IPv6 Internet, Steven M. Bellovin, Bill Cheswick, and Angelos D. Keromytis.
February 11, 2006 in IPv6, papers | Permalink
Tell others: digg submit
|
del.icio.us this
|
Reddit
Comments
Nice Blog :)
www.FriendsterForum.com
Posted by: FriendsterForum.com | Feb 11, 2006 10:30:13 PM
The comments to this entry are closed.