4 - Application-Layer Security (Worms)

Question 1

What is the difference between viruses and worms?

Answer 1

Viruses are malwares which infect other programs, documents or disks once they are executed. They replicate themselves and spread within the system. User interaction is needed to start the propagation.

Worms are similar, but they can self-propagate across the internet by exploiting security flaws in widely-used services.

Question 2

How to find new worms?

Answer 2

• Network telescopes to monitor large range of unused addresses.
• Honeypots used to catch a malware
• IDS