Approach to worm early warning based on local victim behavior
Traditional algorithm to scanning worms early warning can’t be used to distinguish P2P activity which can produce infection-like traffic,it also can’t be used to forecast the multivector worms which propagation by exploits several vulnerabilities.To settle this problem,an improved algorithm was deve...
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | zho |
| Published: |
Editorial Department of Journal on Communications
2007-01-01
|
| Series: | Tongxin xuebao |
| Subjects: | |
| Online Access: | http://www.joconline.com.cn/zh/article/74657447/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1841537479282262016 |
|---|---|
| author | TIAN Jun-feng ZHANG Chi LIU Tao LI Ning |
| author_facet | TIAN Jun-feng ZHANG Chi LIU Tao LI Ning |
| author_sort | TIAN Jun-feng |
| collection | DOAJ |
| description | Traditional algorithm to scanning worms early warning can’t be used to distinguish P2P activity which can produce infection-like traffic,it also can’t be used to forecast the multivector worms which propagation by exploits several vulnerabilities.To settle this problem,an improved algorithm was developed and an early warning model was established based on the algorithm.At last,the feasibility of this method was analysed,by comparing with existing methods,the new approach become more efficient,and had the characteristic of issuing warning at the early stage of worm propagation. |
| format | Article |
| id | doaj-art-a51684abb56c4c54aafe4123d6cb8222 |
| institution | Kabale University |
| issn | 1000-436X |
| language | zho |
| publishDate | 2007-01-01 |
| publisher | Editorial Department of Journal on Communications |
| record_format | Article |
| series | Tongxin xuebao |
| spelling | doaj-art-a51684abb56c4c54aafe4123d6cb82222025-01-14T08:35:49ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2007-01-01808974657447Approach to worm early warning based on local victim behaviorTIAN Jun-fengZHANG ChiLIU TaoLI NingTraditional algorithm to scanning worms early warning can’t be used to distinguish P2P activity which can produce infection-like traffic,it also can’t be used to forecast the multivector worms which propagation by exploits several vulnerabilities.To settle this problem,an improved algorithm was developed and an early warning model was established based on the algorithm.At last,the feasibility of this method was analysed,by comparing with existing methods,the new approach become more efficient,and had the characteristic of issuing warning at the early stage of worm propagation.http://www.joconline.com.cn/zh/article/74657447/Internet wormearly warningbehaviorhoneypot |
| spellingShingle | TIAN Jun-feng ZHANG Chi LIU Tao LI Ning Approach to worm early warning based on local victim behavior Tongxin xuebao Internet worm early warning behavior honeypot |
| title | Approach to worm early warning based on local victim behavior |
| title_full | Approach to worm early warning based on local victim behavior |
| title_fullStr | Approach to worm early warning based on local victim behavior |
| title_full_unstemmed | Approach to worm early warning based on local victim behavior |
| title_short | Approach to worm early warning based on local victim behavior |
| title_sort | approach to worm early warning based on local victim behavior |
| topic | Internet worm early warning behavior honeypot |
| url | http://www.joconline.com.cn/zh/article/74657447/ |
| work_keys_str_mv | AT tianjunfeng approachtowormearlywarningbasedonlocalvictimbehavior AT zhangchi approachtowormearlywarningbasedonlocalvictimbehavior AT liutao approachtowormearlywarningbasedonlocalvictimbehavior AT lining approachtowormearlywarningbasedonlocalvictimbehavior |