Design of a system for real-time worm detection

Proceedings - 12th Annual IEEE Symposium on High Performance Interconnects, Hot Interconnects

Volumn , Issue , 2004, Pages 77-83

  Madhusudan, Bharath ^a   Lockwood, John ^a  

^a WASHINGTON UNIVERSITY IN ST LOUIS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET ROUTERS; INTERNET SECURITY; INTERNET WORMS; INTRUSION DETECTION AND PREVENTION SYSTEM (IDPS);

COMPUTER SOFTWARE; COMPUTER WORMS; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; FIELD PROGRAMMABLE GATE ARRAYS; INTERNET; RANDOM ACCESS STORAGE; ROUTERS; SECURITY OF DATA;

REAL TIME SYSTEMS;

EID: 14844320851     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CONECT.2004.1375207     Document Type: Conference Paper

References (15)

1. D. Moore, C. Shannon, G. Voelker, and S. Savage, "Internet quarantine: Requirements for containing self-propagating code," in IEEE INFOCOM, 2002.
2. J. Lockwood, J. Moscola, D. Reddick, M. Kulig, and T. Brooks, "Application of hardware accelerated extensible network nodes for internet worm and virus protection," in International Working Conference on Active Networks (IWAN), (Kyoto, Japan), Dec. 2003.
3. S. Staniford, V. Paxson, and N. Weaver, "How to own the internet in your spare time," in Usenix Security Symposium, Aug. 2002.
4. S. Singh, C. Estan, G. Varghese, and S. Savage, "The earlybird system for the real-time detection of unknown worms." UCSD, Department of Computer Science, Technical Report CS2003-0761, Aug. 2003.
5. C. Estan and G. Varghese, "New directions in traffic measurement and accounting," in ACM SIGCOMM, (Pittsburgh, PA), Aug. 2002.
6. C. Estan, G. Varghese, and M. Fisk, "Bitmap algorithms for counting active flows on high speed links," in Internet Measurement Conference, Oct. 2003.
7. A. Kumar, M. Sung, J. Xu, and J. Wang, "Data streaming algorithms for efficient and accurate estimation of flow size distribution," in ACM SIGMETRICS, June 2002.
8. J. Moscola, M. Pachos, J. W. Lockwood, and R. P. Loui, "Implementation of a streaming content search-and-replace module for an internet firewall," in Hot Interconnects, (Stanford, CA, USA), pp. 122-129, Aug. 2003.
9. B. Bloom, "Space/time tradeoffs with hash coding with allowable errors," in CACM, pp. 13(7):422-426, May 1970.
10. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, and J. Lockwood, "Deep packet inspection using parallel bloom filters," in Symposium on High Performance Interconnects (HotI '03), Aug. 2003.
11. G. Gonnet and E. Brewer, "Handbook of algorithms and data structures," (Reading, MA: Addison-Wesley, 1991).
12. R. Pang and V. Paxson, "Anonymized Traces." http://www-nrg.ee.lbl.gov/anonymized-traces.html/.
13. R. Pang and V. Paxson, "A high level programming environment for packet trace anonymization and transformation," in ACM SIGCOMM, (Karlsruhe), Aug. 2003.
14. J. W. Lockwood, "An Open Platform for Development of Network Processing Modules in Reprogrammable Hardware," in IEC DesignCon'01, (Santa Clara, CA), pp. WB-19, Jan. 2001.
15. F. Braun, J. Lockwood, and M. Waldvogel, "Protocol wrappers for layered network packet processing in reconfigurable hardware," IEEE Micro, vol. 22, pp. 66-74, Jan. 2002.