Recent Internet Worms: Who are the Victims, and How Good are We at Getting the Word Out?

10/30/01


Click here to start


Table of Contents

Recent Internet Worms: Who are the Victims, and How Good are We at Getting the Word Out?

Outline

Data Sources

Response to July 19th CodeRed

Host Infection Rate

Patching Survey

Patching Rate

Vulnerability Charts

Vulnerability: Country

Vulnerability: Domain

Who gets Internet worms?

Host Infections

Hosts by Timezone (UTC)

Hosts by Timezone (Local)

Dynamic IP Addresses

Dynamic IP Addresses

DHCP Effect seen in /24s

Conclusions

Thanks

Cooperative Association for Internet Data Analysis (CAIDA) San Diego Supercomputer Center Computer Science & Engineering University of California, San Diego http://www.caida.org/ analysis/security/

The Spread of the Code-Red worm (CRv2)

Outline

What is the Code-Red worm?

Code-Red Detection

Host Infection Rate

Host Infection Rate

Exponential Infection Rate

Infection Rate over Time

Host Deactivation

Host Deactivation

Host Deactivation Rates over Time

Host Characterization: Country

Host Characterization: Country of Origin

Host Characterization: Top-Level Domain (TLD)

Host Characterization: Top-Level Domain (TLD)

Host Characterization: Top-Level Domain (TLD)

Host Characterization: Domain

Host Characterization: Domain

Host Characterization: Domain

Host Infection Animation

Vulnerability

Vulnerability: Country

Vulnerability: Country

Vulnerability: Top-Level Domain (TLD)

Vulnerability: Top-Level Domain (TLD)

Vulnerability: Domain

Vulnerability: Domain

Conclusions

Cooperative Association for Internet Data Analysis (CAIDA) San Diego Supercomputer Center http://www.caida.org/analysis/ security/code-red/

Host Characterization: Country of Origin

Host Characterization: Top-Level Domain (TLD)

Host Characterization: Domain

Code Red, the second coming - from whence diurnal cycles

Who gets Internet worms?

Host Infections

Hosts by Timezone (UTC)

Hosts by Timezone (Local)

Dynamic IP Addresses

DHCP Effect seen in /24s

Cooperative Association for Internet Data Analysis (CAIDA) San Diego Supercomputer Center University California San Diego http://www.caida.org/analysis/ security/code-red/

Patching Rate

Author: David Moore