Behavior-based worm detection and signature generation

3rd International Multi-Symposiums on Computer and Computational Sciences, IMSCCS'08

Volumn , Issue , 2008, Pages 124-131

  Yao, Yu ^a   Lv, Junwei ^a   Gao, Fuxiang ^a   Zhang, Yanfang ^a   Yu, Ge ^a  

^a South East University   (China)

Author keywords

[No Author keywords available]

Indexed keywords

BEHAVIOR-BASED; BEHAVIORAL CHARACTERISTICS; COMMUNICATION PATTERNS; DETECTION ALGORITHMS; DETECTION APPROACHES; DETECTION RATES; DISTRIBUTED DETECTIONS; EARLY DETECTIONS; HIGH DETECTION RATES; NETWORK TRAFFICS; REAL-TIME CHARACTERISTICS; SIGNATURE GENERATIONS; SIGNATURE-BASED APPROACHES; WORM DETECTIONS;

INTERNET;

EID: 63249091894     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IMSCCS.2008.29     Document Type: Conference Paper

References (13)

1. C. C. Zou, L. Gao, W. Gong, D. Towsley.: Monitoring and Early Warning for Internet Worms. In Proceedings of the 10th ACM Conference on Computer and Communication Security (CCS '2003). Washington D. C., USA: ACM Press, Oct. 2003, pp. 190-199.
2. Z. Chen, L. Gao, K. Kwiat.: Modeling the Spread of Active Worms. In Proceedings of the 22nd Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM' 2003), San Francisco, California, USA, Mar. 2003, pp. 1890-1900
3. Sihan Qing, Weiping Wen, et al..: A survey and trends on Internet worms. Journal of Software, 2004, 15(8):1208-1219
4. Thomas M. Chen. : Intrusion detection for Viruses and Worms. In: IEC Annual Review of Communications, 2004
5. Qiao Y., X. W. Xin, Y. Bin, S. Ge, "Anomaly inrusion detection method based on HMM", IEEE Electronic Letters Online No: 20020467, 2002
6. Martin Roesch.: Snort-Lightweight Intrusion Detection for Networks[EB/OI.]. Http://www.snort.org/docs/lisapper.txt, 2003-02-20
7. H. J. Wang, C. Guo, D. R. Simon, and A. Zugenmaier.: Shield: Vulnerability-Driven Network Filter for Preventing Known Vulnerability Exploits. In Proceedings of the ACM SIGCOMM Conference, Aug. 2004
8. C. Kreibich, J. Crowcroft.: Honeycomb-Creating Intrusion Detection Signatures Using Honeypots. In Proceedings of the 2nd Workshop on Hot Topics in Networks (HotNets-II), November 2003
9. K.-A Kim, B. Karp. : Autograph: Toward Automated Distributed Worm Distribution. In Proceedings of the USENIX Security Symposium, August 2004
10. S. Singh, C. Estan, G. Varghese, S. Savage.: Automated worm fingerprinting. In Proceedings of the ACM/USENIX Symposium on Operating System Design and Implementation, Dec. 2004
11. Daniel R. Ellis, john G. Aiken, Kira S. Attwood, Scott D. Tenaglia.:. A Behavioral Approach to Worm Detection[C]. In: Proceedings of ACM Workshop on Rapid Malcode(WORM), New York:ACM Press, 2004.43-53
12. Ping W, Binxing F.: large scale network worm detection using automatic signature extraction[J], journal on communications, 2006, 27(6): 87-93
13. Colleen Shannon, David Moore.: The Spread of the Witty Worm [EB/OI.]. Http://www.caida.org/analysis/security/witty, 2004