Strategies of Computer Worms

Peter Szor's new book, The Art of Computer Virus Research and Defense, is  a fascinating study of malware history and analysis. In the book, Szor devotes some time to the worm problem. His concised description is a worthwhile read. The chapter has been posted on the InformIT website.

This chapter discusses the generic (or at least "typical") structure of advanced computer worms and the common strategies that computer worms use to invade new target systems. Computer worms primarily replicate on networks, but they represent a subclass of computer viruses. Interestingly enough, even in security research communities, many people imply that computer worms are dramatically different from computer viruses. In fact, even within CARO (Computer Antivirus Researchers Organization), researchers do not share a common view about what exactly can be classified as a "worm." We wish to share a common view, but well, at least a few of us agree that all computer worms are ultimately viruses. Let me explain.

Source: Strategies of Computer Worms, Mar 4, 2005 By Peter Szor. Sample Chapter is provided courtesy of Addison Wesley Professional.

April 20, 2005 in Books | Permalink | Comments (1)