In July 19th, 2001, a variant of the Code-Red worm appeared and spread very rapidly around the world. The CAIDA Code-Red worm dataset was processed so each hot spot represents one Autonomous System with reported activity in a given time interval. In this animations, a positive identification of a node participating in the spread was marked red. We generated several sequences of heat maps, representing different time intervals. This visualization of the Code-Red Worm uses 30 minute snapshots with a cumulative effect: hotspots for previous intervals are kept to show how the worm spreads over time.
The cumulative effect is what we refer to when we do not turn off hotspots from previous time intervals. This effectively allows us to show the spread of hotspots across the map.
In this animation, we can see the Code-Red Worm spread quickly from the US to the right-hand side of the map. By 2001-04-07-19 09:24:26 (middle of the video), we can see that nearly the entire network has been infected.
This animation shows the same information seen in the previous video but in larger steps. The infection quickly spreads across the network.
This animations shows the worm spreading at different speeds. For the first minute and 26 seconds of the video, we see the worm spreading at five minute intervals. After, the worms spreads across the network in 30 minute intervals.
The decay effect is what we refer to when a hotspot fades away after several intervals without any activity. In the event of new activity being reported, the spot will become hot again.
In this animation, we can see the infection spread dramatically at 0:53 seconds (half way) into the video. As the video continues, we see the infection recede back to the United States, its first reported activity.
This animation presents the same information as the previous video but much quicker. We can see the infection explode in activity and again recede back to the left side of the map.