Reaction times
Source blocking
Content blocking
To contain worms to 10% of vulnerable hosts after 24 hours of
spreading at 10 probes/sec:
Source blocking: reaction time must be < 25 minutes.
Content blocking: reaction time must be < 3 hours.