Fast Messenger Based Worms Chien and Hindocha, 2003 30 second infection rates, 500,000 victims Based on simulations Reason: network already built (buddy list) Evade detection, defenses Desktop firewalls, behavioral IDS systems Allowed connectivity between client, server Assumptions: Almost all clients are vulnerable No throttling mechanism at message router