Overview (part one) Background: worms in practice Mechanisms for scanning Flash worms (fast, obvious) Contagion worms (slow, subtle)