Title
A Novel Worm Detection Model Based on Host Packet Behavior Ranking
Abstract
Traditional behavior-based worm detection can't eliminate the influence of the worm-like P2P traffic effectively, as well as detect slow worms. To try to address these problems, this paper first presents a user habit model to describe the factors which influent the generation of network traffic, then a design of HPBRWD (Host Packet Behavior Ranking Based Worm detection) and some key issues about it are introduced. This paper has three contributions to the worm detection: 1) presenting a hierarchical user habit model; 2) using normal software and time profile to eliminate the worm-like P2P traffic and accelerate the detection of worms; 3) presenting HPBRWD to effectively detect worms. Experiments results show that HPBRWD is effective to detect worms.
Year
DOI
Venue
2008
10.1007/978-3-540-88873-4_4
OTM Conferences (2)
Keywords
Field
DocType
p2p traffic,worm detection,host packet behavior ranking,slow worm,host packet behavior,user habit model,novel worm detection model,experiments result,network traffic,traditional behavior-based worm detection,hierarchical user habit model,key issue,p2p
Ranking,Biology,Computer security,Network packet,Computer network,Software,Time profile
Conference
Volume
ISSN
Citations 
5332
0302-9743
1
PageRank 
References 
Authors
0.37
13
4
Name
Order
Citations
PageRank
Fengtao Xiao131.44
Huaping Hu2357.92
Bo Liu36312.54
Xin Chen431.44