Approach to worm early warning based on local victim behavior
Traditional algorithm to scanning worms early warning can’t be used to distinguish P2P activity which can produce infection-like traffic,it also can’t be used to forecast the multivector worms which propagation by exploits several vulnerabilities.To settle this problem,an improved algorithm was deve...
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | zho |
| Published: |
Editorial Department of Journal on Communications
2007-01-01
|
| Series: | Tongxin xuebao |
| Subjects: | |
| Online Access: | http://www.joconline.com.cn/zh/article/74657447/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| Summary: | Traditional algorithm to scanning worms early warning can’t be used to distinguish P2P activity which can produce infection-like traffic,it also can’t be used to forecast the multivector worms which propagation by exploits several vulnerabilities.To settle this problem,an improved algorithm was developed and an early warning model was established based on the algorithm.At last,the feasibility of this method was analysed,by comparing with existing methods,the new approach become more efficient,and had the characteristic of issuing warning at the early stage of worm propagation. |
|---|---|
| ISSN: | 1000-436X |