Abstract:Worm is becoming a more and more serious issue because worm attacks can cause huge loss in short time due to the fast-spreading character. When breaking out, worms induce abnormal traffic unlike the normal traffic, which gives us a clue of worm detecting by analyzing the abnormal characteristics of traffic involving worms, i.e. lumped traffic. Worm detection based on analyzing abnormal traffic characteristics has the advantage that it can detect novel worms without understanding the nature of the worms. And worm detection at network level is one possible detecting path, especially for Network Intrusion Detection Systems(NIDS). In this poster, we present the diversity of traffic characteristics between the normal traffic and worm traffic from the self-similarity point of view, which can be a preparation for the further investigation of the diversity of traffic characteristics between the normal traffic and lumped traffic.

A novel anomaly detection algorithm and prewarning technology of unknown worms

A Novel Anomaly Detection Method for Worms

Host Based Unknown WOrm Detection Using Machine Learning

Detection Method of Computer Worms Based on SVM

Research and Development of Worm Detection Technologies

Packet Payload Based Anomalous Network Intrusion Detection

Worm Intrusion Alarm Modeling Based on Network Traffic Character

Cooperation System of Worm Detection and Quarantine in Real Time

Design and Implementation of Network Worm Detection System for Internal Network

A New Approach to Automatically Detect Worms

Adaptive method for monitoring network and early detection of internet worms

Worm Warning and Optimization of Nonlinear Propagation Model

Detecting Randomly Scanning Worms Based on Heavy-Tailed Property

A Worm Early Detection System Based on Multi-Similarity

Network Worms Detecting System Based on Failed Connections Analysis

Research of Characteristics of Worm Traffic

The analysis of worm non-linear propagation model and the design of worm distributed detection technology

The research of worm distributed detection technology based on network security.

A worm detection method based on multi-feature likeness

Fast Detection of Worm Infection for Large-Scale Networks

On the Effectiveness of multi-similarity for early detection of worms