A new generation for intelligent anti-internet worm early system detection

Worm requires host computer with an address on the Internet and any of several vulnerabilities to create a big threat environment.We propose intelligent early system detection mechanism for detecting internet worm.The mechanism is combined of three techniques: Failure Connection Detection (FCD) whi...

Full description

Bibliographic Details
Main Authors: Rasheed, Mohammad M., Md Norwawi, Norita, M. Kadhum, Mohammed, Ghazali, Osman
Format: Conference or Workshop Item
Language:English
Published: 2009
Subjects:
Online Access:https://repo.uum.edu.my/id/eprint/13488/1/PID77.pdf
Description
Summary:Worm requires host computer with an address on the Internet and any of several vulnerabilities to create a big threat environment.We propose intelligent early system detection mechanism for detecting internet worm.The mechanism is combined of three techniques: Failure Connection Detection (FCD) which concerns with detecting the internet worm and stealthy worm in which computer infected by the worm by using Artificial Immune System; and the Traffic Signature Detection (TSD) which responsible for detecting traffic signature for the worm; and the DNA Filtering Detection (DNAFD) which converts traffic signature to DNA signature and sending it to all computer that connected with the router to create a firewall for new worms.Our proposed algorithm can detect difficult stealthy internet worm in addition to detecting unknown internet worm.