Detection and location algorithm against local-worm
Detection and location algorithm against local-worm作者机构:Department of Computer Science and Technology Xi'an Jiaotong University Xi'an 710049 China
出 版 物:《Science in China(Series F)》 (中国科学(F辑英文版))
年 卷 期:2008年第51卷第12期
页 面:1935-1946页
核心收录:
学科分类:0810[工学-信息与通信工程] 0808[工学-电气工程] 08[工学] 0839[工学-网络空间安全] 081201[工学-计算机系统结构] 0812[工学-计算机科学与技术(可授工学、理学学位)]
基 金:the National Natural Science Foundation of China (Grant No. 60403028)
主 题:worm detection traffic characteristic detection and location
摘 要:The spread of the worm causes great harm to the computer network. It has recently become the focus of the network security research. This paper presents a local-worm detection algorithm by analyzing the characteristics of traffic generated by the TCP-based worm. Moreover, we adjust the worm location algorithm, aiming at the differences between the high-speed and the low-speed worm scanning methods. This adjustment can make the location algorithm detect and locate the worm based on different scanning rate. Finally, we verified the validity and efficiency of the proposed algorithm by simulating it under NS-2.