Future Work Performance improvements to scale to larger networks: /8 back scatter can be overwhelming. More realistic network simulation: Improve TCP stack. Improve network characteristics. Packet capture and automated analysis: Kreibich's Honeycomb to automatically create worm signatures.