DoWitcher: Effective worm detection and containment in the internet core

Proceedings - IEEE INFOCOM

Volumn , Issue , 2007, Pages 2541-2545

  Ranjan, S ^a   Shah, S ^a   Nucci, A ^a   Munafo M ^b   Cruz, R ^c   Muthukrishnan, S ^d  

^a Narus Inc   (United States)

^b POLITECNICO DI TORINO   (Italy)

^c UNIVERSITY OF CALIFORNIA   (United States)

^d RUTGERS UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; COMPUTER VIRUSES; WAVE FILTERS;

LOW-PROPAGATION RATES; PROOF-OF-CONCEPT; WORM DETECTION;

SECURITY OF DATA;

EID: 34548301939     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2007.317     Document Type: Conference Paper

References (7)

1. D. Moore, V. Paxon, S. Savage, C. Shannon, S. Staniford, and N. Weaver "The Spread of the Sapphire/Slammer Worm", IEEE Security and Privacy, 1(4) July 2003
2. S. Singh, C. Estan, G. Varghese, and S. Savage "Automated Worm Fingerprinting," Proceedings of the 6th ACM/USENIX Symposium on Operating System Design and Implementation (OSDI), December 2004
3. H.-A. Kim and B. Karp, "Autograph: toward automated, distributed worm signature detection," Proceedings of the 13th USENIX Symposium, August 2004
4. J. Newsome, B. Karp, and D. Song, "Polygraph: Automatically Generating Signatures for Polymorphic Worms,", Proceedings of IEEE Security and Privacy Symposium, Oakland, CA USA, May 2005
5. A. Wagner and B. Plattner "Entropy Based Worm and Anomaly Detection in Fast IP Networks", IEEE 14-th International Workshop on Enabling Technologies: Infrastructures for Collaborative Enterprises (WET ICE), STCA security workshop June 2005
6. A. Lakhina, M. Crovella, and C. Diot "Mining Anomalies Using Traffic Feature Distributions", ACM Sigcomm August 2005
7. K. Xu, Z. Zhang and S. Bhattacharyya "Profiling Internet Backbone Traffic: Behavior Models and Applications", ACM Sigcomm August 2005