A Novel Anomaly Detection Method for Worms

摘要：

　　This paper proposes a novel anomaly detection method of network worms.The algorithm detects unknown worms by multidimensional worm abnormal detection technology,extracts its feature string via analyzing worm data with leap-style and creates new rules to detect the corresponding worm in case that the unknown worm attacks again.The paper has realized the automatic detection of unknown worms.Experiment data has showed that the method has high success detection rate and low false alarm rate.

关键词： Network worms Automatic detection of worms Anomaly detection Feature extraction

作者: Xiaojun Tong Zhu Wang Miao Zhang Yang Liu Hui Xu

作者单位: computer science and technology harbin institute of technology Weihai,China information science and technology harbin institute of technology Weihai,China harbin institute of technology Weihai,China habin institute of technology Weihai,China

会议类型: 国际会议

会议名称: The 13th International Symposium on Distributed Computing and Applications to Business,Engineering and Science(DCABES 2014)(第十三届分布式计算及其应用国际学术研讨会)

会议地点: 湖北咸宁

会议语种:英文

页码: 253-257

在线出版日期: 2014-11-24（万方平台首次上网日期，不代表论文的发表时间）