A behavioral approach to worm detection

WORM'04 - Proceedings of the 2004 ACM Workshop on Rapid Malcode

Volumn , Issue , 2004, Pages 43-53

  Ellis, Daniel R ^a   Aiken, John G ^a   Attwood, Kira S ^a   Tenaglia, Scott D ^a  

^a MITRE CORPORATION   (United States)

Author keywords

Behavioral Signatures; Descendant Relation; Intrusion Detection; Network Application Architecture; Network Worms

Indexed keywords

CODES (SYMBOLS); COMPUTER ARCHITECTURE; LOCAL AREA NETWORKS; ROUTERS; SECURITY OF DATA; SENSORS; SERVERS; TELECOMMUNICATION TRAFFIC;

BEHAVIORAL SIGNATURES; DESCENDANT RELATION; INTRUSION DETECTION; NETWORK APPLICATION ARCHITECTURE (NAA); NETWORK WORMS;

COMPUTER WORMS;

EID: 14944379887     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1029618.1029625     Document Type: Conference Paper

References (17)

1. Joan M. Aldous and Robin J. Wilson, Graphs and Applications: An Introductory Approach, Springer-Verlag, 2000.
2. 2 Paradigm: A Secure Network Service Architecture, 19th Annual Computer Security Applications Conference (ACSAC), December, 2003.
3. Dan Ellis, Worm Anatomy and Model, Proceedings of ACM CCS WORM Workshop 2003, October, 2003.
4. Joshua D. Guttman, Filtering Postures: Local Enforcement for Global Policies, Proceedings, 1997 IEEE Symposium on Security and Privacy pages 120-129. IEEE Computer Society Press. May 1997.
5. Hyang-Ah Kim, Brad Karp, Autograph: Toward Automated, DistributedWorm Signature Detection, USENIX Security Symposium, to appear, 2004.
6. Internet Engineering Task Force RFC 1700. http://www.ietf.org/rfc/ rfc1700.txt.
7. Jose Nazario, Defense and Detection Strategies against Internet Worms, Artech House, 2004.
8. Sumeet Singh, Cristian Estan, George Varghese, Stefan Savage, The EarlyBird System for Real-time Detection of Unknown Worms, to be presented at the Sixth Symposium on Operating System Design and Implementation (OSDI), 2004.
9. http://www.snort.org/.
10. Stuart Staniford et al., The Design of GrIDS: A Graph-Based Intrusion Detection System. UCD Technical Report CSE-99-2, January, 1999.
11. Stuart Staniford, Nicholas Weaver, Vern Paxson, How to Own the Internet in your Spare Time, USENIX Security Symposium, 2002.
12. Stuart Staniford. Containment of Scanning Worms in Enterprise Networks. Journal of Computer Security, to appear, 2004.
13. Richard W. Stevens, TCP/IP Illustrated, vol. 1, Addison Wesley Longman, Inc., 1994.
14. Nicholas Weaver, Vern Paxson, Stuart Staniford, Robert Cunningham. A Taxonomy of Computer Worms. Proceedings of ACM CCS WORM Workshop 2003, October 2003.
15. Nicholas Weaver, Dan Ellis, Vern Paxson, Stuart Staniford, Worms vs. Perimeters: The Case for HardLANs, To appear, Hot Interconnects 2004, Stanford University, August, 2004.
16. Nicholas Weaver, Stuart Staniford, Vern Paxson, Very Fast Containment of Scanning Worms, USENIX Security Symposium, 2004.
17. Matthew Williamson. Throttling Viruses: Restricting Propagation to Defeat Mobile Malicious Code. In ACSAC, 2002.