Attacks Against the Flash Worm

Bandwidth is finite
Worm will congest itself off the network
Hitlist draining
Fake compromise
Forge infection status
"I am already infected"
Too much effort for any one machine
TCP connections consume resources
UDP packets have less overhead
Single attack sources easier to defend against
Consequence of coordinated attacks
Easier than a growing list of attackers