ABSTRACT

A computer worm is a stand-alone malware computer program that replicates itself in order to spread to other computers without requiring any human intervention by sending copies of its code in network packets and ensuring the code is executed by the computers that receive it. Internet worms pose a major threat to Internet infrastructure security, and they may cause the loss of millions of dollars. Remotely infecting a computer requires coercing the computer into running the worm code. The most difficult technique that the worms can use to hide themselves is polymorphism. Polymorphic worms are considered the most dangerous threats to Internet security, and the danger lies in changing their pay-loads in every infection attempt to avoid security systems. The chapter presents critical information regarding Internet worms, their life cycle, various types, and techniques with practical sample codes and details.