Worm detection, early warning and response based on local victim information

@article{Gu2004WormDE,
  title={Worm detection, early warning and response based on local victim information},
  author={Guofei Gu and Monirul I. Sharif and Xinzhou Qin and David Dagon and Wenke Lee and George F. Riley},
  journal={20th Annual Computer Security Applications Conference},
  year={2004},
  pages={136-145}
}
Worm detection systems have traditionally focused on global strategies. In the absence of a global worm detection system, we examine the effectiveness of local worm detection and response strategies. This paper makes three contributions: (1) we propose a simple two-phase local worm victim detection algorithm, DSC (Destination-Source Correlation), based on worm behavior in terms of both infection pattern and scanning pattern. DSC can detect zero-day scanning worms with a high detection rate and… CONTINUE READING
Highly Cited
This paper has 124 citations. REVIEW CITATIONS

Topics

Statistics

0102030'05'07'09'11'13'15'17
Citations per Year

125 Citations

Semantic Scholar estimates that this publication has 125 citations based on the available data.

See our FAQ for additional information.