Terminology
	• Reaction time includes time to detect the activity, propagate information to participants, and activate blocking.  (Note: any particular detection technique is beyond the scope of this work.) • Success metrics (taken at end of 24 hours): – global - fraction of vulnerable hosts infected – local - fraction infected only within participating ASes – 24 hours taken as a reasonable estimate for wide-scale human response