Fast Detection of Scanning Worm Infections

@inproceedings{Schechter2004FastDO,
  title={Fast Detection of Scanning Worm Infections},
  author={Stuart E. Schechter and Jaeyeon Jung and Arthur W. Berger},
  booktitle={RAID},
  year={2004}
}
Worm detection and response systems must act quickly to identify and quarantine scanning worms, as when left unchecked such worms have been able to infect the majority of vulnerable hosts on the Internet in a matter of minutes [9]. We present a hybrid approach to detecting scanning worms that integrates significant improvements we have made to two existing techniques: sequential hypothesis testing and connection rate limiting. Our results show that this two-pronged approach successfully… CONTINUE READING
Highly Influential
This paper has highly influenced 30 other papers. REVIEW HIGHLY INFLUENTIAL CITATIONS
Highly Cited
This paper has 293 citations. REVIEW CITATIONS

From This Paper

Topics from this paper.
186 Citations
23 References
Similar Papers

Citations

Publications citing this paper.
Showing 1-10 of 186 extracted citations

293 Citations

02040'06'09'12'15'18
Citations per Year
Semantic Scholar estimates that this publication has 293 citations based on the available data.

See our FAQ for additional information.

References

Publications referenced by this paper.

Similar Papers

Loading similar papers…