Three Papers on Worms

Three Papers on Worms (all via wormblog) I want to read tomorrow:
On Deriving Unknown Vulnerabilities from ZeroDay Polymorphic and Metamorphic Worm Exploits (direct link to the PDF).
Advanced Polymorphic Worms: Evading IDS by Blending in with Normal Traffic (direct link to the PDF)
The Latest in Internet Attacks: Web Application Worms (direct link to the PDF)

The is also a blog entry at Thomas Ptacek’s blog entitled The Real Answer To Worm Propagation which I’ll read tomorrow (too tired right now).