Behaviour based worm detection and signature automation

Journal of Computer Science

Volumn 7, Issue 11, 2011, Pages 1724-1728

  Anbar, Mohammed ^a   Manickam, Selvakumar ^a   Hosam, Al Samarraie ^a   Chai, Kok Soon ^a   Baklizi, Mohmoud ^a   Almomani, Ammar ^a  

^a SCHOOL OF PHYSICS   (Malaysia)

Author keywords

Artificial Neural Networks (ANNs); Destination Source Correlation (DSC); Intrusion Detection Systems (IDSs); Network scanning; Worm detection

Indexed keywords

EID: 80053252436     PISSN: 15493636     EISSN: None     Source Type: Journal    
DOI: 10.3844/jcssp.2011.1724.1728     Document Type: Article

References (8)

1. Gu, G., M. Sharif, X. Qin, D. Dagon, W. Lee and G. Riley, 2004. Worm detection, early warning and response based on local victim information. Proceedings of the 20th Annual Computer Security Applications Conference, Dec. 6-10, IEEE Xplore Press, pp: 136-145. DOI: 10.1109/CSAC.2004.51
2. Kim, H.A. and B. Karp, 2004. Autograph: Toward automated, distributed worm signature detection. Proceedings of the 13th conference on USENIX Security Symposium (SSYM'04), USENIX Association Berkeley, CA, USA., pp: 19-19.
3. Li, Z., M. Sanghi, Y. Chen, M. Y. Kao and B. Chavez, 2006. Hamsa: Fast signature generation for zeroday polymorphicworms with provable attack resilience. Proceedings of the IEEE Symposium on Security and Privacy, May 21-24, Berkeley/Oakland, California, pp: 32-47.
4. Moskovitch, R., Y. Elovici and L. Rokach, 2008. Detection of unknown computer worms based on behavioral classification of the host. Comput. Stat. Data Anal., 52: 4544-4566. DOI: 10.1016/j.csda.2008.01.028
5. Sen, S., O. Spatscheck and D. Wang, 2004. Accurate, scalable in-network identification of p2p traffic using application signatures. Proceedings of the 13th international conference on World Wide Web, May 17-22, New York, USA., pp: 512-521. DOI: 10.1145/988672.988742
6. Singh, U.K., A.K. Ramani, N.S. Chaudhari and V. Gupta, 2005. Increasing effectiveness of ids to improve security in intranet. Am. J. Applied Sci., 2: 1032-1035. DOI: 10.3844/ajassp.2005.1032.1035
7. Stopel, D., Z. Boger, R. Moskovitch, Y. Shahar and Y. Elovici, 2006. Improving worm detection with artificial neural networks through feature selection and temporal analysis techniques. Int. J. Applied Math. Comput. Sci., 1: 34-40.
8. Wang, Y., Y. Xiang and S. Z. Yu, 2010. An automatic application signature construction system for unknown traffic. Concurrency Comput.: Practice Experience, 22: 1927-1944. DOI: 10.1002/cpe.1603