Edit WYSIWYGattachfile Attach PDF Raw View►More Actions▼More Actions

Restore topic to revision: You will be able to review the topic before saving it to a new revision

Copy text and form data to a new topic (no attachments will be copied though).
Name of copy:
You will be able to review the copied topic before saving

Rename/move topic... scans links in all public webs (recommended)
Rename/move topic... scans links in CBI_ComputerSecurity web only
Delete topic... scans links in all public webs (recommended)
Delete topic... scans links in CBI_ComputerSecurity web only

Revision Date Username Comment
907 Apr 2015 - 13:27ThomasMisa 
805 Mar 2015 - 09:16ThomasMisa 
721 Dec 2014 - 14:17ThomasMisa 
621 Dec 2014 - 14:15ThomasMisa 
521 Dec 2014 - 14:13ThomasMisa 
430 May 2014 - 17:22ThomasMisa 
325 Feb 2014 - 10:02norqu036? 
219 Feb 2014 - 19:54norqu036? 
118 Feb 2014 - 10:31norqu036? 

Render style:     Context:

 History: r9 < r8 < r7 < r6 < r5
[X] Hide this message.
Notice: On June 30, 2016, UMWiki service will be decommissioned. If you have information in UMWIki that needs to be preserved, you should make plans to move it before that date. Google Sites is anticipated to be the most popular and appropriate alternative for users because it offers a more modern and user-friendly interface and unlimited capacity. To learn more about the features of Google Sites and other alternatives, and to identify which one best fits your needs, see the University’s Website Solution Selection Guide. If you have concerns or would like help regarding this change and your options, please contact Technology Help at help@umn.edu
You are here: UMWiki>CBI_ComputerSecurity Web>Mechanisms>MechanismsWorm (07 Apr 2015, ThomasMisa)

Current Activitieslock Who is Who?lock People Programs Publications CSHW_2014 Systems Events Mechanisms


A worm is a malicious program that spreads copies of itself through a network. The primary difference between a worm and a standard virus is that, whereas a virus seeks to embed itself into existing programs in order to alter code or data, a worm can make stand-alone copies of itself. Typically, worms are used to attack networks rather than individual computers. Worms that self-replicate without bound -- in an effort to exhaust some computer system resource -- are sometimes called "rabbits."(1)

The first worm, also known as the Morris worm after its creator, was released on the Internet on November 2, 1988. It caused serious damage to the network not only by infecting systems, but also by causing many system administrators to remove their machines from the network. Estimates of the worm's damage range from $100,000 to $97 million. The Morris worm led to DARPA's establishing the Computer Emergency Response Team (CERT) for rapid response.

Another example is the SQL Slammer (sometimes called Sapphire) worm. The SQL Slammer worm was notorious for the speed with which it spread upon its release on January 25, 2003. Within ten minutes, the worm infected more than 75,000 hosts, about 90% of all those vulnerable. Though the worm contained no malicious payload, its rapid propagation caused network overloads and disabled database servers.(2)


Supported by the National Science Foundation CNS--TC 1116862 "Building an Infrastructure for Computer Security History."


1 , 2 : Charles P. Pfleeger and Shari Lawrence Pfleeger, Security in Computing. 3rd Edition, New Jersey: Prentice Hall, 2003.

Topic revision: r9 - 07 Apr 2015 - 13:27:39 - ThomasMisa
Signed in as lewi0740 (NicLewis) | Sign out
UMWiki UMWiki
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding UMWiki? Send feedback