Characterizing Internet worm spatial-temporal infection structures

Since the Morris worm was released in 1988, Internet worms continue to be one of top security threats. For example, the Conficker worm infected 9 to 15 million machines in early 2009 and shut down the service of some critical government and medical networks. Moreover, it constructed a massive peer-to-peer (P2P) botnet. Botnets are zombie networks controlled by attackers setting out coordinated attacks. In recent years, botnets have become the number one threat to the Internet. The objective of this research is to characterize spatial-temporal infection structures of Internet worms, and apply the observations to study P2P-based botnets formed by worm infection. First, we infer temporal characteristics of the Internet worm infection structure, i.e., the host infection time and the worm infection sequence, and thus pinpoint patient zero or initially infected hosts. Specifically, we apply statistical estimation techniques on Darknet observations. We show analytically and empirically that our proposed estimators can significantly improve the inference accuracy. Second, we reveal two key spatial characteristics of the Internet worm infection structure, i.e., the number of children and the generation of the underlying tree topology formed by worm infection. Specifically, we apply probabilistic modeling methods and a sequential growth model. We show analytically and empirically that the number of children has asymptotically a geometric distribution with parameter 0.5, and the generation follows closely a Poisson distribution. Finally, we evaluate bot detection strategies and effects of user defenses in P2P-based botnets formed by worm infection. Specifically, we apply the observations of the number of children and demonstrate analytically and empirically that targeted detection that focuses on the nodes with the largest number of children is an efficient way to expose bots. However, we also point out that future botnets may self-stop scanning to weaken targeted detection, without greatly slowing down the speed of worm infection. We then extend the worm spatial infection structure and show empirically that user defenses, e.g. , patching or cleaning, can significantly mitigate the robustness and the effectiveness of P2P-based botnets. To counterattack, we evaluate a simple measure by future botnets that enhances topology robustness through worm re-infection.

The Use of the Internet in the U.S Lodging Industry

The internet has been heralded as the communications and marketing tool of the future for the hospitality industry. Both corporate executives and information technology experts feel the hotel of the future cannot do without a presence on the Web. Yet, do the actions of hospitality operators in the field reflect this optimism? This article reports on a study done among property managers in the U.S. lodging industry to determine the actual use of the internet in hotel properties of various types and sizes. Additionally, it addresses development and maintenance issues related to internet use.

The effects of participation in an Internet -based project on the development of global knowledge, global mindedness, and global pedagogy among preservice social studies teachers

In order to prepare younger generations to live in a world characterized by interconnectedness, developing global and international perspectives for future teachers has been recommended by the National Council for the Social Studies and the National Council for the Accreditation of Teacher Education. The purpose of this study was to investigate the effects that participation in the International Communication and Negotiation Simulation (ICONS), an Internet-based communication project has on preservice social studies teachers' global knowledge, global mindedness, and global teaching strategies. ^ The study was conducted at a public university in South Florida. A combination of quantitative and qualitative approaches was employed. Two groups of preservice social studies teachers were chosen as participants: a control group composed of 14 preservice teachers who enrolled in a global education class in the summer semester of 1998 and an experimental group that included nine preservice teachers who took the same class in the fall semester of 1998. The summer class was conducted in a traditional format, which included lectures, classroom discussions, and student presentations. The fall class incorporated a five-week Internet-based communication project. The Global Mindedness Scale (Hett, 1993) and an adapted Test of Global Knowledge (ETS, 1981) were administered upon the completion of the class. ^ Contrasting case studies were utilized to investigate the impact of participation in the ICONS on the development of preservice teachers' global pedagogy. Four preservice teachers, two selected from each group were observed and interviewed to explore how they were infusing global perspectives into social studies curriculum and instruction during a 10-week student teaching internship in the spring semester of 1999. ^ This study had three major findings. First, preservice social studies teachers from the experimental group on average scored significantly higher than those from the control group on the global knowledge test. Second, no significant difference was found between the two groups in their mean scores on the Global Mindedness Scale. Third, all four selected preservice social studies teachers were infusing global perspectives into United States and world history curriculum and instruction during their student teaching internship. Using multiple resources was the common pedagogy. The two who participated in the ICONS were more aware of using the communication feature of the Internet and the web sites that reflect more international perspectives to facilitate teaching about the world. ^ Recommendations were made for further research and for preservice studies teacher education program development. ^