An Approach to Detect Executable Content for Anomaly Based Network Intrusion Detection

Since current internet threats contain not only malicious codes like Trojan or worms, but also spyware and adware which do not have explicit illegal content, it is necessary to have a mechanism to prevent hidden executable files downloading in the network traffic. In this paper, we present a new solution to identify executable content for anomaly based network intrusion detection system

• Type: Conference
• Year: 2007
• Where: IPPS
• Authors: Like Zhang, Gregory B. White
• Keywords: Current Internet Threats, Distributed And Parallel Computing, Explicit Illegal Content, Hidden Executable Files, IPPS 2007