A new approach for early detection of internet worms based on connection degree

2005 International Conference on Machine Learning and Cybernetics, ICMLC 2005

Volumn , Issue , 2005, Pages 2424-2430

  Bo, Chen ^a   Bin Xingfang, ^b   Yun, Xiao Chun ^a  

^a HARBIN INSTITUTE OF TECHNOLOGY   (China)

^b National Computer Network and Information System Security Administration Center   (China)

Author keywords

Behavior model; Connection degree; CUSUM; Early detection; Worm

Indexed keywords

ERROR DETECTION; INTERNET; MATHEMATICAL MODELS;

BEHAVIOR MODELS; CONNECTION DEGREE; CUSUM; EARLY DETECTION;

COMPUTER WORMS;

EID: 28444447116     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. D. Denning, An Intrusion Detection Model, IEEE Transactions on Software Engineering, Vol 13, No. 2, 1987.
2. D. Anderson, T. Frivold, and A. Valdes, Next generation Intrusion Detection Expert System (NIDES): A summary, Technical Report SRI-CSL-95-07, Computer Science Laboratory, SRI International, May 1995.
3. A. Valdes and K. Skinner, Adaptive, Model-based Monitoring for Cyber Attack Detection, Proceedings of the 3th International Symposium on Recent Advances in Intrusion Detection (RAID), October 2000.
4. J.O. Kephart, D. M. Chess, and S.R. White, Computers and Epidemiology, IEEE Spectrum, Vol 30, No. 5, May 1993.
5. J.O. Kephart and S.R. White, Directed-graph Epidemiological Models of Computer Viruses, Proceedings of IEEE Symposium on Security and Privacy, pp. 343-359, 1991.
6. J.O. Kephart and S.R. White. Measuring and Modeling Computer Virus Prevalence. Proceedings of IEEE Symposium on Security and Privacy, 1993.
7. S. Staniford, V. Paxson, and N.Weaver, How to Own the Internet in Your Spare Time, Proceedings of the 11th USENIX Security Symposium, August 2002.
8. Dan Ellis. Worm Anatomy and Model. Proceedings of the 2003 ACM workshop on Rapid Malcode, October 2003.
9. C. C. Zou, W. Gong, and D. Towsley. Code Red Worm Propagation Modeling and Analysis, Proceedings of 9th ACM Conference on Computer and Communications Security (CCS'02), October 2002.
10. D. Moore, C. Shannon, G.M. Voelker, and S. Savage, Network Telescopes: Technical Report. Technical Report TR-2004-04, CAIDA, 2004.
11. V. H. Berk, R.S. Gray, and G. Bakos, Using Sensor Networks and Data Fusion for Early Detection of Active Worms, Proceedings of the SPIE AeroSense, pp. 92-104, 2003.
12. S. Staniford-Chen, S. Cheung, R. Crawford, M. Dilger, J. Frank,J. Hoagland, K. Levitt, C. Wee, R. Yip, and D. Zerkle, GrIDS-a Graph Based Intrusion Detection System for Large Networks, Proceedings of the 19th National Information Systems Security Conference, October 1996.
13. C. Zou, W. Gong, and D. Towsley, The Monitoring and Early Detection of Internet Worms, IEEE/ACM Trans. on Networking, 2005.
14. M.Basseville, I.V.Nikiforov, Detection of Abrupt Changes: Theory and Application, Prentic Hall, 1993.