Abstract:Worm is becoming a more and more serious issue because worm attacks can cause huge loss in short time due to the fast-spreading character. When breaking out, worms induce abnormal traffic unlike the normal traffic, which gives us a clue of worm detecting by analyzing the abnormal characteristics of traffic involving worms, i.e. lumped traffic. Worm detection based on analyzing abnormal traffic characteristics has the advantage that it can detect novel worms without understanding the nature of the worms. And worm detection at network level is one possible detecting path, especially for Network Intrusion Detection Systems(NIDS). In this poster, we present the diversity of traffic characteristics between the normal traffic and worm traffic from the self-similarity point of view, which can be a preparation for the further investigation of the diversity of traffic characteristics between the normal traffic and lumped traffic.

Worm Attack Detection and Response

Cooperation System of Worm Detection and Quarantine in Real Time

Research and Development of Worm Detection Technologies

Monitoring Network And Defending Against Worm Attacks

Design and Implementation of Network Worm Detection System for Internal Network

Adaptive method for monitoring network and early detection of internet worms

Worm Intrusion Alarm Modeling Based on Network Traffic Character

Approach to Early Detection and Defense Against Internet Worms

Research of Characteristics of Worm Traffic

Wavelet Analysis Based Worm Attack Early Detection

An Agent-Oriented Network Worm Defense System based on Optimized Path

Principle and Design of Active Defense System to Contain Internet Worm

A New Approach to Automatically Detect Worms

A Worm Early Detection System Based on Multi-Similarity

Fast Detection of Worm Infection for Large-Scale Networks

Detection Algorithm of Internet Worm Eruption and Its Application

A worm behavioral approach to susceptible host detection

Active Technologies to Contain Internet Worm

Worm Detection in Large Scale Network by Traffic

A New Approach for Early Detection of Internet Worms Based on Connection Degree

The Analysis and Detection of Worms Based on Web Search Engine