Analyzing worms and network traffic using compression

Journal of Computer Security

Volumn 15, Issue 3, 2007, Pages 303-320

  Wehner, Stephanie ^a  

^a CWI   (Netherlands)

Author keywords

Interner warms; Intrusion detection; Kolmogorov Complexity; Malware; Virus

Indexed keywords

COMPUTATIONAL COMPLEXITY; FUZZY CLUSTERING; INTERNET; INTRUSION DETECTION; TELECOMMUNICATION TRAFFIC;

IDS EVASION; INTERNER WARMS; KOLMOGOROV COMPLEXITY; MALWARE;

COMPUTER VIRUSES;

EID: 34249899090     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2007-15301     Document Type: Article

References (16)

1. S. Bush and T. Hughes, On the effectiveness of Kolmogorov complexity estimation to discriminate semantic types, in: Invited Paper: SFI, Workshop: Resilient and Adaptive Defense of Computing Networks 2003, Santa Fe Institute, Santa Fe, NM, 2003.
2. E. Carrera and G. Erdélyi. Digital genome Mapping - advanced binary malware analysis, in: Virus Bulletin Conference September 2004, 2004.
3. R. Cilibrasi, A. Cruz, B. Julio and S. Wehner, Complearn toolkit, http://complearn.sourceforge.net/index.html.
4. T. Dullien, Personal communication.
5. S. Evans and B. Barnett, Network security through conservation of complexity, in: MILCOM, 2002.
6. H. Flake, Structural comparison of executable objects, in: DIMVA, 2004, pp. 161-173.
7. S. Goel and S. Bush, Kolmogorov complexity estimates for detection of viruses in biologically inspired security systems: A comparison with traditional approaches, Complexity Journal 9(2), (2003). Special Issue: Resilient & Adaptive Defense of Computing Networks.
8. A. Kulkarni and S. Bush, Active network management and Kolmogorov complexity, in: OpenArch 2001, Anchorage, Alaska, 2001.
9. A. Kulkarni, S. Bush and S. Evans, Detecting distributed denial-of-service attacks using Kolmogorov complexity metrics, in: GE CRD Technical Report 2001CRD176, 2001.
10. M. Li and P. Vitanyi, An Introduction to Kolmogorov Complexity and Its Applications, 2nd edn, Springer, 1997.
11. M. Oberhumer, L. Molnar and J. Reiser, UPX - the Ultimate Packer for eXecutables. http://upx.sourceforge.net/.
12. Security.is. Apache/php exploit. http://packetstormsecurity.org/0010- exploits/phploit.c.
13. A.S. Tanenbaum, Computer Networks, 3rd edn, Prentice-Hall, 1996.
14. Snort Development Team, Snort, The open source network intrusion detection system. http://www.snort.org.
15. Viruslist.com. Virus encyclopedia, http://www.viruslist.com/eng/ viraslist.html.
16. P. Vitanyi and R. Cilibrasi, Clustering by compression, 2003. http://arxiv.org/abs/cs.CV/0312044.