@inproceedings{6b80d3a80785408fbabb5d23495f1160,
title = "Fast detection of worm infection for large-scale networks",
abstract = "Internet worms constitute a major threat to the security of today's networks. They work by exploiting vulnerabilities in operating systems and application software that run on end systems. In this paper, an effective algorithm for fast detection of worms is proposed. It integrates the worms' behavior attributes with their traffic distribution and detects abnormal behavior by their similarity distribution and changes in some of their attributes. The process of fast detection based on similarity is discussed in detail including threshold selection, similarity detection algorithm and fine analysis. Simulation experiments show that the detection algorithm can locate the worm infection prior to it spreading over the large-scale network.",
author = "Hui He and Mingzeng Hu and Weizhe Zhang and Hongli Zhang",
year = "2006",
doi = "10.1007/11739685\_70",
language = "英语",
isbn = "3540335846",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "672--681",
booktitle = "Advances in Machine Learning and Cybernetics - 4th International Conference, ICMLC 2005, Revised Selected Papers",
address = "德国",
note = "4th International Conference on Machine Learning and Cybernetics, ICMLC 2005 ; Conference date: 18-08-2005 Through 21-08-2005",
}