A Worm Behavioral Approach to Susceptible Host Detection

A new detection approach based on worm behaviors for IDS anti-worm is presented. By the method, the susceptible hosts probed by worms can be detected, and then an immediate counter-attack to the susceptible host can be proposed. As a case study, a simulation on the IDS-based anti-worm counter-attacking the malicious worm is given, which shows the new containment is much more effective and bring less traffic to network than the traditional one. It can be used as a reference for Grid security infrastructure.

• Type: Conference
• Year: 2005
• Where: GCC
• Authors: BaiLing Wang, Binxing Fang, Xiao-chun Yun
• Keywords: GCC 2005, IDS-based Anti-worm Counter-attacking, Susceptible Host, Worm Behaviors