A behavior-based anti-worm system

Author

Hung, Jason C. ; Kuan-Cheng Lin ; Chang, Anthony Y. ; Lin, Nigel H. ; Lin, Louis H.

fYear

2003

fDate

27-29 March 2003

Firstpage

812

Lastpage

815

Abstract

We propose a behavior-based intrusion detection and response system for Internet worms called Lambent Anti-Worm System (LAWS). LAWS can detect the intruded services and influenced range automatically. Besides, it also can analyze the key information of the intrusion. We can prevent worm distribution and intrusion in advance via the information provided. In addition, to detecting and preventing the distribution of a well-known malicious worm, LAWS can also defend for future, unknown, or new malicious worms. Mobile agents will help LAWS to form a defense system for other LAW´S users over the Internet. The contribution of our system is to decrease the response time of attack and reduce the damaged range. At the same time, it also diminishes the damage and decreases the fixed cost.

Keywords

Internet; invasive software; safety systems; IDS; Internet worm; LAWS; Lambent Anti-Worm System; behavior-based anti-worm system; behavior-based intrusion detection and response system; defense system; intrusion detection system; malicious worms; mobile agents; worm distribution; worm intrusion; Computer networks; Computer worms; Delay; Electronic mail; Information analysis; Information management; Internet; Intrusion detection; Mobile agents; Pattern recognition;

fLanguage

English

Publisher

ieee

Conference_Titel

Advanced Information Networking and Applications, 2003. AINA 2003. 17th International Conference on

Print_ISBN

0-7695-1906-7

Type

conf

DOI

10.1109/AINA.2003.1193006

Filename

1193006