Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely:  present a technique to infer a worm's infection sequence from traffic traces collected at a  network telescope .  analyze the fidelity of the infection evolution as inferred by our technique, and explore its effectiveness under varying constraints including the scanning rate of the worm, the size of the vulnerable population, and the size of the telescope itself. Moreover,  provide guidance regarding the point at which our method's accuracy diminishes beyond practical value. As  show empirically, this point is reached ll after a few hundred initial infected hosts (possibly including "patient zero'') has been reliably identified with more than 80% accuracy.  generalize our mechanism by exploiting the change in the pattern of inter-arrival times exhibited during the early stages of such an outbreak to detect the presence and approximate size of the hit-list. Our mechanism is resilient to varying parameters like the worm scanning rate and the size of the vulnerable population, and can provide significant insights into the characteristics of the hit-list even under spreading dynamics that exceed that of currently known worms. Lastly, to illustrate the practicality of our solution,  apply our approach to real-world traces of the Witty worm and provide a refined estimate on the previously suspected hit-list size.
['Moheeb Abu Rajab', 'Fabian Monrose', 'Andreas Terzis']
I am writing a research paper on a idea Worm evolution tracking via timing analysis
[{"from": "human", "value": "I am writing a research paper on a idea Worm evolution tracking via timing analysis"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely:  present a technique to infer a worm's infection sequence from traffic traces collected at a  network telescope .  analyze the fidelity of the infection evolution as inferred by our technique, and explore its effectiveness under varying constraints including the scanning rate of the worm, the size of the vulnerable population, and the size of the telescope itself. Moreover,  provide guidance regarding the point at which our method's accuracy diminishes beyond practical value. As  show empirically, this point is reached ll after a few hundred initial infected hosts (possibly including \"patient zero'') has been reliably identified with more than 80% accuracy.  generalize our mechanism by exploiting the change in the pattern of inter-arrival times exhibited during the early stages of such an outbreak to detect the presence and approximate size of the hit-list. Our mechanism is resilient to varying parameters like the worm scanning rate and the size of the vulnerable population, and can provide significant insights into the characteristics of the hit-list even under spreading dynamics that exceed that of currently known worms. Lastly, to illustrate the practicality of our solution,  apply our approach to real-world traces of the Witty worm and provide a refined estimate on the previously suspected hit-list size."}]