Novel approach based on neighborhood relation signature against polymorphic internet worms

WANG Jie1; WANG Jian-xin1; LIU Xu-chong2

您当前的位置：

首页 >

文章列表页 >

Novel approach based on neighborhood relation signature against polymorphic internet worms

更新时间：2024-10-14

- Novel approach based on neighborhood relation signature against polymorphic internet worms
- Vol. 32, Issue 8, Pages: 150-158(2011)
- 作者机构：
  
  1. 中南大学信息科学与工程学院
  2. 湖南省公安厅网络安全保卫与技术侦察总队
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393.08
- Published：2011
- 稿件说明：
移动端阅览
WANG Jie1, WANG Jian-xin1, LIU Xu-chong2. Novel approach based on neighborhood relation signature against polymorphic internet worms[J]. 2011, 32(8): 150-158.
DOI：

WANG Jie1, WANG Jian-xin1, LIU Xu-chong2. Novel approach based on neighborhood relation signature against polymorphic internet worms[J]. 2011, 32(8): 150-158. DOI：

摘要

结合多态蠕虫的特点

着重考虑负载字节之间的关系

将蠕虫负载内部的近邻关系特征(NRS

neighbor-hood-relation signature)提取出来用于蠕虫检测。NRS建立在蠕虫负载内部相邻字节之间关系的基础上

体现了某些多态蠕虫各形态之间的共性特征

能够更灵活地对多态蠕虫进行检测。设计了NRSGA(NRS generating algorithm)算法来提取1-NRS、2-NRS和(1

2)-NRS

并分别进行了实验

以测试特征提取过程的正确性和NRS检测蠕虫的有效性。实验结果表明

与其他方法相比

NRS在检测多态蠕虫时具有更低的漏报率

能够更好地防御多态蠕虫的传播。

Abstract

A class of neighborhood-relation signatures（NRS） was proposed based on neighborhood relationship between worm bytes.Because NRS embodies common characteristics of different morph of some polymorphic worms

Different patterns of polymorphic worms efficiently were detected.NRS generating algorithm（NRSGA） was designed to generate three types of signatures: 1-NRS

2-NRS and（1

2）-NRS.Some experiments were performed to demonstrate the correct-ness of the process of signatures generation and the effectiveness of NRS.Experiment results show that our approach has lower false negative ratio in detecting worms

and is effective to prevent polymorphic worms from propagating.

关键词

Keywords

references

Views

691

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Automated polymorphic worm signature generation approach based on seed-extending

Survey on chaos-based low probability of interception communication technology

Survey on privacy protection indoor positioning

Survey of capacity limits and implementation techniques in wireless covert communication

Research on coreference resolution technology of entity in information security

Related Author

Jie WANG

Xiao-xian HE

ZHOU Ang

WANG Shilian

CHEN Weiyu

XIA Guojiang

Zhiheng WANG

Yanyan XU

Related Institution

Beijing Institute of Astronautical Systems Engineering

College of Electronic Science and Technology, National University of Defense Technology

State Key Laboratory of Information Engineering in Surveying Mapping and Remote Sensing, Wuhan University

State Key Lab of Rail Traffic Control and Safety,Beijing Jiaotong University

College of Information and Communication, National University of Defense Technology

AI问答

⁰