Target Discovery
Looking for targets of propagation is done by the process called scanning or fingerprinting
Random – select randomly
Hit-list- select from list of vulnerable machines
Topological – used info. of infected victim
Local subnet – if infection behind firewall, worm will look for further infection in local subnet