Matches in SemOpenAlex for { <https://semopenalex.org/work/W2107510910> ?p ?o ?g. }
- W2107510910 endingPage "390" @default.
- W2107510910 startingPage "377" @default.
- W2107510910 abstract "Active worms pose major security threats to the Internet. This is due to the ability of active worms to propagate in an automated fashion as they continuously compromise computers on the Internet. Active worms evolve during their propagation, and thus, pose great challenges to defend against them. In this paper, we investigate a new class of active worms, referred to as Camouflaging Worm (C-Worm in short). The C-Worm is different from traditional worms because of its ability to intelligently manipulate its scan traffic volume over time. Thereby, the C-Worm camouflages its propagation from existing worm detection systems based on analyzing the propagation traffic generated by worms. We analyze characteristics of the C-Worm and conduct a comprehensive comparison between its traffic and nonworm traffic (background traffic). We observe that these two types of traffic are barely distinguishable in the time domain. However, their distinction is clear in the frequency domain, due to the recurring manipulative nature of the C-Worm. Motivated by our observations, we design a novel spectrum-based scheme to detect the C-Worm. Our scheme uses the Power Spectral Density (PSD) distribution of the scan traffic volume and its corresponding Spectral Flatness Measure (SFM) to distinguish the C-Worm traffic from background traffic. Using a comprehensive set of detection metrics and real-world traces as background traffic, we conduct extensive performance evaluations on our proposed spectrum-based detection scheme. The performance data clearly demonstrates that our scheme can effectively detect the C-Worm propagation. Furthermore, we show the generality of our spectrum-based scheme in effectively detecting not only the C-Worm, but traditional worms as well." @default.
- W2107510910 created "2016-06-24" @default.
- W2107510910 creator A5002139930 @default.
- W2107510910 creator A5002311337 @default.
- W2107510910 creator A5010804247 @default.
- W2107510910 creator A5059448769 @default.
- W2107510910 creator A5072008189 @default.
- W2107510910 date "2011-05-01" @default.
- W2107510910 modified "2023-10-01" @default.
- W2107510910 title "Modeling and Detection of Camouflaging Worm" @default.
- W2107510910 cites W1573286687 @default.
- W2107510910 cites W1744212210 @default.
- W2107510910 cites W1966150547 @default.
- W2107510910 cites W1970433198 @default.
- W2107510910 cites W1971985207 @default.
- W2107510910 cites W2031006315 @default.
- W2107510910 cites W2048885124 @default.
- W2107510910 cites W2067064024 @default.
- W2107510910 cites W2083477206 @default.
- W2107510910 cites W2084630069 @default.
- W2107510910 cites W2092043296 @default.
- W2107510910 cites W2099053789 @default.
- W2107510910 cites W2100734403 @default.
- W2107510910 cites W2103315222 @default.
- W2107510910 cites W2108986857 @default.
- W2107510910 cites W2113667439 @default.
- W2107510910 cites W2125672877 @default.
- W2107510910 cites W2131510858 @default.
- W2107510910 cites W2140094598 @default.
- W2107510910 cites W2164210932 @default.
- W2107510910 cites W2168874936 @default.
- W2107510910 cites W2171322701 @default.
- W2107510910 cites W4251267463 @default.
- W2107510910 doi "https://doi.org/10.1109/tdsc.2010.13" @default.
- W2107510910 hasPublicationYear "2011" @default.
- W2107510910 type Work @default.
- W2107510910 sameAs 2107510910 @default.
- W2107510910 citedByCount "50" @default.
- W2107510910 countsByYear W21075109102012 @default.
- W2107510910 countsByYear W21075109102013 @default.
- W2107510910 countsByYear W21075109102014 @default.
- W2107510910 countsByYear W21075109102015 @default.
- W2107510910 countsByYear W21075109102016 @default.
- W2107510910 countsByYear W21075109102017 @default.
- W2107510910 countsByYear W21075109102018 @default.
- W2107510910 countsByYear W21075109102019 @default.
- W2107510910 countsByYear W21075109102020 @default.
- W2107510910 countsByYear W21075109102021 @default.
- W2107510910 countsByYear W21075109102022 @default.
- W2107510910 countsByYear W21075109102023 @default.
- W2107510910 crossrefType "journal-article" @default.
- W2107510910 hasAuthorship W2107510910A5002139930 @default.
- W2107510910 hasAuthorship W2107510910A5002311337 @default.
- W2107510910 hasAuthorship W2107510910A5010804247 @default.
- W2107510910 hasAuthorship W2107510910A5059448769 @default.
- W2107510910 hasAuthorship W2107510910A5072008189 @default.
- W2107510910 hasConcept C110875604 @default.
- W2107510910 hasConcept C134306372 @default.
- W2107510910 hasConcept C136764020 @default.
- W2107510910 hasConcept C154945302 @default.
- W2107510910 hasConcept C15744967 @default.
- W2107510910 hasConcept C177264268 @default.
- W2107510910 hasConcept C199360897 @default.
- W2107510910 hasConcept C2780767217 @default.
- W2107510910 hasConcept C33923547 @default.
- W2107510910 hasConcept C38652104 @default.
- W2107510910 hasConcept C41008148 @default.
- W2107510910 hasConcept C542102704 @default.
- W2107510910 hasConcept C77618280 @default.
- W2107510910 hasConceptScore W2107510910C110875604 @default.
- W2107510910 hasConceptScore W2107510910C134306372 @default.
- W2107510910 hasConceptScore W2107510910C136764020 @default.
- W2107510910 hasConceptScore W2107510910C154945302 @default.
- W2107510910 hasConceptScore W2107510910C15744967 @default.
- W2107510910 hasConceptScore W2107510910C177264268 @default.
- W2107510910 hasConceptScore W2107510910C199360897 @default.
- W2107510910 hasConceptScore W2107510910C2780767217 @default.
- W2107510910 hasConceptScore W2107510910C33923547 @default.
- W2107510910 hasConceptScore W2107510910C38652104 @default.
- W2107510910 hasConceptScore W2107510910C41008148 @default.
- W2107510910 hasConceptScore W2107510910C542102704 @default.
- W2107510910 hasConceptScore W2107510910C77618280 @default.
- W2107510910 hasIssue "3" @default.
- W2107510910 hasLocation W21075109101 @default.
- W2107510910 hasOpenAccess W2107510910 @default.
- W2107510910 hasPrimaryLocation W21075109101 @default.
- W2107510910 hasRelatedWork W1521353230 @default.
- W2107510910 hasRelatedWork W1596397513 @default.
- W2107510910 hasRelatedWork W2087258916 @default.
- W2107510910 hasRelatedWork W2089375346 @default.
- W2107510910 hasRelatedWork W2314394688 @default.
- W2107510910 hasRelatedWork W2352957847 @default.
- W2107510910 hasRelatedWork W2394099118 @default.
- W2107510910 hasRelatedWork W2739624643 @default.
- W2107510910 hasRelatedWork W4229450262 @default.
- W2107510910 hasRelatedWork W4280566261 @default.
- W2107510910 hasVolume "8" @default.
- W2107510910 isParatext "false" @default.