Early warning for network worms

Authors:
Antti Tikkanen;Teemupekka Virtanen
Affiliations:
Helsinki University of Technology;Helsinki University of Technology
Venue:
CIS'05 Proceedings of the 2005 international conference on Computational Intelligence and Security - Volume Part II
Year:
2005

Citing 2
Cited 0

Software engineering (6th ed.)

Software engineering (6th ed.)
Very fast containment of scanning worms

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13

Quantified Score

Hi-index	0.00

Visualization

Abstract

Network worms, very similar to viruses, are malicious programs that use vulnerabilities in software to spread between computers that are somehow connected using a computer network. We remind that a computer should be understood broadly – in the near future, a worm might infect a mobile phone as easily as it now infects a personal desktop computer. We have proposed a modular architecture for an early warning system. We also implemented a prototype system consisting of several detection and analysis modules. While the prototype was limited in nature, it meets the most of the requirements we have set for such a system.