Probe rates
Source blocking
Content blocking
•
To contain worms to 1-10% of vulnerable hosts after 24 hours
if reaction system responds in 10 minutes:
–
Source blocking: 20 - 25 probes/sec
–
Content blocking: 130 - 180 probes/sec