Are there any defenses?

Better security design (riiight)

The Berkeley folk suggest a CDC analog for Internet worms.

Honeypots? Honeynets? Early warning systems?
Lesson: disable the honeynets