Automatic Signature Generation Algorithm of Polymorphic Worm
CSTR:
Author:
  • Article
  • | |
  • Metrics
  • |
  • Reference [5]
  • |
  • Related [20]
  • | | |
  • Comments
    Abstract:

    This paper researches the feature description and automatic signature generation algorithm of polymorphic worms. It proposes a new signature generation approach for polymorphic worms-MS-PADS (multiple separated string position-aware distribution signature), which integrate the advantage of PADS and Polygraph. It solved the problem of PADS signature width determination under strong background noise conditions. This method could generate high quality signatures of polymorphic worms with low false-positive rate and high detection precision rate.

    Reference
    1 盛津芳,谭云桥,王斌.网络攻击中多态变形技术分析及其对抗策略.计算机安全,2007,1:11-13.
    2 祝仰金,秦拯.Zero_day多态蠕虫特征自动提取技术研究. 微计算机信息,2011,27(1):198-200.
    3 赵旭,何聚厚.Polymorphic蠕虫特征自动提取算法及检测技术研究.计算机工程与应用,2008,44(36):106-108.
    4 Tang Y, Chen SG. An Automated Signature-Based Approach against Polymorphic Internet Worms. IEEE Trans. on Parallel & Distributed Systems, 2007,18(7): 879-892.
    5 Hideo K, Genya K. Gibbs sampling methods for Bayesian quantile regression. Journal of Statistical Computation & Simulation, 2011,81(11):1565-1578.
    Cited by
    Comments
    Comments
    分享到微博
    Submit
Get Citation

陈雪林.多态蠕虫特征码自动提取算法.计算机系统应用,2013,22(2):142-145

Copy
Share
Article Metrics
  • Abstract:1484
  • PDF: 2995
  • HTML: 0
  • Cited by: 0
History
  • Received:August 06,2012
  • Revised:September 26,2012
Article QR Code
You are the first990457Visitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-3
Address:4# South Fourth Street, Zhongguancun,Haidian, Beijing,Postal Code:100190
Phone:010-62661041 Fax: Email:csa (a) iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063