Reaction times
Source blocking
Content blocking
•
To contain worms to 10% of vulnerable hosts after 24 hours of
spreading at 10 probes/sec:
–
Source blocking: reaction time must be < 25 minutes.
–
Content blocking: reaction time must be < 3 hours.