Earticle

초록

영어

With the growing sophistication of computer worms, information security has become a prime concern for individuals, community and organizations. Traditional signature based IDS, though effective for known attacks but failed to handle the unknown attack promptly. This paper describes a novel honeypot system which isolates the suspicious traffic from normal traffic, and capture most useful information regarding the worm’s activities, without attacker’s knowledge. Our system will be used for critical study of structure and behavior of most sophisticated worms and then forwards the necessary input to Signature Generation Module for automatically generating signature of unknown polymorphic worms. Our attempt is to analyze the invariant content of polymorphic worms and using a probabilistic approach we compute the signature of worm with low false positive. Evaluation based on synthetically generated polymorphic worms demonstrate that our system is able to enhance the capability of IDS signature library and increases the probability of detecting polymorphic worms with efficiency, accuracy.

목차

Abstract
 1. Introduction
 2. Related Work
 3. Structure of Polymorphic Worms
 4. System Model
  4.1. Architecture
  4.2. Data Control
  4.3. Data Capture
 5. Signature Generation
 6. Experiment and result Analysis:
 7. Conclusion
 Acknowledgements
 References

키워드

저자

• Sounak Paul [ Dept. of Computer Sc. & Engineering Birla Institute of Technology Mesra, Ranchi, India ]
• Bimal Kumar Mishra [ Dept. of Applied MathematicsBirla Institute of Technology Mesra Ranchi, India ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605