Presentation 2003/7/10
The Numerical Analysis of the Effect of Distributed Active Firewall against SQL Slammer Worm Virus
Makoto SUGITA, Masaru KATAYAMA, Kohei SHIOMOTO, Naoaki YAMANAKA,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) We propose a new hierarchical band-restricted, one factor propagation model for the SQL Slammer Worm Virus. Since this model considers topology, traffic, and bandwidth, we can numerically analyze the effectiveness of various countermeasures as well as worm propagation characteristics. We also propose the distributed active firewall model as a countermeasure to the SQL Slammer Worm Virus. The novel feature of this model, compared to existing Intrusion Detection and Prevention (IDP) models, is its use of attack information advertising. This report provides a numerical analysis of the propagation of SQL Slammer Worm Virus based on our model and also evaluate the effectiveness of the distributed active firewall model. Our numerical analysis indicate that our model can simulate the real propagation characteristics of the SQL Slammer Worm, and that our distributed active firewall model retain more bandwidth than conventional IDP models.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) SQL Slammer Worm Virus / hierarchical band-restricted one factor worm model / Distributed Active firewall
Paper # ISEC2003-26
Date of Issue

Conference Information
Committee ISEC
Conference Date 2003/7/10(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Information Security (ISEC)
Language ENG
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) The Numerical Analysis of the Effect of Distributed Active Firewall against SQL Slammer Worm Virus
Sub Title (in English)
Keyword(1) SQL Slammer Worm Virus
Keyword(2) hierarchical band-restricted one factor worm model
Keyword(3) Distributed Active firewall
1st Author's Name Makoto SUGITA
1st Author's Affiliation NTT Network Innovation Laboratories, NTT Corporation()
2nd Author's Name Masaru KATAYAMA
2nd Author's Affiliation NTT Network Innovation Laboratories, NTT Corporation
3rd Author's Name Kohei SHIOMOTO
3rd Author's Affiliation NTT Network Innovation Laboratories, NTT Corporation
4th Author's Name Naoaki YAMANAKA
4th Author's Affiliation NTT Network Innovation Laboratories, NTT Corporation
Date 2003/7/10
Paper # ISEC2003-26
Volume (vol) vol.103
Number (no) 195
Page pp.pp.-
#Pages 8
Date of Issue