TY - JOUR
T1 - Detection and location algorithm against local-worm
AU - Yang, Xinyu
AU - Shi, Yi
AU - Zhu, Huijun
PY - 2008/12
Y1 - 2008/12
N2 - The spread of the worm causes great harm to the computer network. It has recently become the focus of the network security research. This paper presents a local-worm detection algorithm by analyzing the characteristics of traffic generated by the TCP-based worm. Moreover, we adjust the worm location algorithm, aiming at the differences between the high-speed and the low-speed worm scanning methods. This adjustment can make the location algorithm detect and locate the worm based on different scanning rate. Finally, we verified the validity and efficiency of the proposed algorithm by simulating it under NS-2.
AB - The spread of the worm causes great harm to the computer network. It has recently become the focus of the network security research. This paper presents a local-worm detection algorithm by analyzing the characteristics of traffic generated by the TCP-based worm. Moreover, we adjust the worm location algorithm, aiming at the differences between the high-speed and the low-speed worm scanning methods. This adjustment can make the location algorithm detect and locate the worm based on different scanning rate. Finally, we verified the validity and efficiency of the proposed algorithm by simulating it under NS-2.
KW - Detection and location
KW - Traffic characteristic
KW - Worm detection
UR - https://www.scopus.com/pages/publications/55849138748
U2 - 10.1007/s11432-008-0132-z
DO - 10.1007/s11432-008-0132-z
M3 - 文章
AN - SCOPUS:55849138748
SN - 1009-2757
VL - 51
SP - 1935
EP - 1946
JO - Science in China, Series F: Information Sciences
JF - Science in China, Series F: Information Sciences
IS - 12
ER -