Approach to worm early warning based on local victim behavior

TIAN Jun-feng; ZHANG Chi; LIU Tao; LI Ning

您当前的位置：

首页 >

文章列表页 >

Approach to worm early warning based on local victim behavior

更新时间：2024-10-14

- Approach to worm early warning based on local victim behavior
- Issue 5, Pages: 80-89(2007)
- 作者机构：
  
  1. 河北大学数学与计算机学院
  2. 河北大学数学与计算机学院,河北,保定,071002
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393.08
- Published：2007
- 稿件说明：
移动端阅览
TIAN Jun-feng, ZHANG Chi, LIU Tao, et al. Approach to worm early warning based on local victim behavior[J]. 2007, (5): 80-89.
DOI：

TIAN Jun-feng, ZHANG Chi, LIU Tao, et al. Approach to worm early warning based on local victim behavior[J]. 2007, (5): 80-89. DOI：

摘要

对于利用漏洞扫描技术传播的蠕虫进行预警

传统方法存在着诸如无法区分P2P数据流

无法检测利用多个端口传播蠕虫等问题。针对这些问题

结合对网络蠕虫行为模式的分析

提出了一种改进的算法

并建立了基于该算法的预警模型。最后对该方法的可行性和各项性能进行了分析

发现新方法能更有效的预警未知的网络蠕虫。

Abstract

Traditional algorithm to scanning worms early warning can’t be used to distinguish P2P activity which can produce infection-like traffic

it also can’t be used to forecast the multivector worms which propagation by exploits several vulnerabilities.To settle this problem

an improved algorithm was developed and an early warning model was established based on the algorithm.At last

the feasibility of this method was analysed

by comparing with existing methods

the new approach become more efficient

and had the characteristic of issuing warning at the early stage of worm propagation.

关键词

Keywords

references

Views

801

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Investigation on the botnets activities

HoneyBow:an automated malware collection tool based on the high-interaction honeypot principle

Research on worm propagation model in IPv6 networks

Related Author

HAN Xin-hui1

GUO Jin-peng1

ZHOU Yong-lin2

ZHUGE Jian-wei1

ZOU Wei1

SONG Cheng-yu1

SU Fei1

LIN Zhao-wen1

Related Institution

Institute of Computer Science and Technology, Peking University

National Computer Network Emergency Response Technical Team/Coordination Center of China

Research Institute of Networking Technology,Beijing University of Posts and Telecommunications

Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia,Beijing University of Posts and Telecommunications

The Fifth Electronics Research Institute,the Ministry of Industry and Information Technology of China

AI问答

⁰