• DocumentCode
    1566882
  • Title

    Internet Observation with ISDAS: How Long Does a Worm Perform Scanning?

  • Author

    Kobori, Tomohiro ; Kikuchi, Hiroaki ; Terada, Masato

  • Author_Institution
    Grad. Sch. of Eng., Tokai Univ., Hiratsuka
  • fYear
    2008
  • Firstpage
    1282
  • Lastpage
    1286
  • Abstract
    We study an estimation of average duration of malicious port-scanning attempts, which would help for an analysis the statistical survey of malicious behaviors and an application to estimate activity of worms spread. This paper reports an average duration of worm activity estimated from random sampling of statistical data actually observed by the Internet Scan Data System, ISDAS.
  • Keywords
    Internet; estimation theory; invasive software; random processes; sampling methods; Internet observation; malicious behavior; malicious port-scanning attempt; random sampling; statistical data; worm activity estimation; Availability; Computer worms; Frequency; Information analysis; Information science; Information security; Internet; Reliability engineering; Sampling methods; Sensor phenomena and characterization; port-scan Poisson distribution;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Availability, Reliability and Security, 2008. ARES 08. Third International Conference on
  • Conference_Location
    Barcelona
  • Print_ISBN
    978-0-7695-3102-1
  • Type

    conf

  • DOI
    10.1109/ARES.2008.82
  • Filename
    4529491