198 search results - page 5 / 40 » Effective worm detection for various scan techniques |
CONEXT
2007
ACM
14 years 17 days ago
2007
ACM
Network intrusion detection systems typically detect worms by examining packet or flow logs for known signatures. Not only does this approach mean worms cannot be detected until ...
IEICET
2007
13 years 10 months ago
2007
From the appearance of CodeRed and SQL Slammer worm, we have learned that the early detection of worm epidemics is important to reduce the damage caused by their outbreak. One prom...
DIMVA
2007
14 years 6 days ago
2007
Scan detection and suppression methods are an important means for preventing the disclosure of network information to attackers. However, despite the importance of limiting the inf...
ACSAC
2006
IEEE
14 years 2 months ago
2006
IEEE
Active worms pose major security threats to the Internet. In this paper, we investigate a new class of active worms, i.e., Camouflaging Worm (C-Worm in short). The C-Worm has the ...
INFOCOM
2006
IEEE
14 years 4 months ago
2006
IEEE
— Polymorphic worms can change their byte sequence as they replicate and propagate, thwarting the traditional signature analysis techniques used by many intrusion detection syste...