Title :
Internet Observation with ISDAS: How Long Does a Worm Perform Scanning?
Author :
Kobori, Tomohiro ; Kikuchi, Hiroaki ; Terada, Masato
Author_Institution :
Grad. Sch. of Eng., Tokai Univ., Hiratsuka
Abstract :
We study an estimation of average duration of malicious port-scanning attempts, which would help for an analysis the statistical survey of malicious behaviors and an application to estimate activity of worms spread. This paper reports an average duration of worm activity estimated from random sampling of statistical data actually observed by the Internet Scan Data System, ISDAS.
Keywords :
Internet; estimation theory; invasive software; random processes; sampling methods; Internet observation; malicious behavior; malicious port-scanning attempt; random sampling; statistical data; worm activity estimation; Availability; Computer worms; Frequency; Information analysis; Information science; Information security; Internet; Reliability engineering; Sampling methods; Sensor phenomena and characterization; port-scan Poisson distribution;
Conference_Titel :
Availability, Reliability and Security, 2008. ARES 08. Third International Conference on
Conference_Location :
Barcelona
Print_ISBN :
978-0-7695-3102-1
DOI :
10.1109/ARES.2008.82