A Preliminary Simulation of the Effect of Scanning Worm Activity on Multicast

ABSTRACT

Previous scanning worms have beensignificant sources of network congestion and have had catastrophic effects on switches, routers and end-systems. In this paper, we focus on the simulation of the secondary resource-exhaustion effects that scanning worms cause on network protocols operating in Internet routers. Specifically, we describe a preliminary simulation study on the effect of the spread of the Ramen and SQL Slammer/Sapphire worms on the multicast infrastructure.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Invasive software (e.g., viruses, worms, Trojan horses)

Additional Classification:
  I. Computing Methodologies
  I.6 SIMULATION AND MODELING
      I.6.6 Simulation Output Analysis
      I.6.8 Types of Simulation
          Subjects: Distributed

General Terms:
Design, Experimentation, Measurement, Performance