| IEICE Technical Committee Submission System Conference Paper's Information |
Online Proceedings [Sign in] Tech. Rep. Archives |
| Go Top Page | Go Previous | [Japanese] / [English] |
| Paper Abstract and Keywords | ||
| Presentation | 2007-12-14 13:30 A Multi-stage Worm Detection System by Flow-wise and Packet-wise Analysis on the Similarity of Payloads Youhei Suzuki, Yuji Waizumi, Hiroshi Tsunoda, Yoshiaki Nemoto (Tohoku Univ)  IN2007-114 |
|
| Abstract | (in Japanese) | (See Japanese page) |
| (in English) | Internet worms are one of the most serious threats in the Internet. For accurately detecting newly created worms, we have proposed the detection method based on not the common character strings but the similarity analysis of packet and flow payloads. Although the packet-wise analysis enables us to accurately detect worms, the high calculation cost of packet-wise analysis needs to be solved. In this paper, we propose an efficient signature generation method for reducing the cost of packet-wise analysis. In addition, we design the multi-stage worm detection system combining the flow-wise and packet-wise analysis for efficiently detecting worms. | |
| Keyword | (in Japanese) | (See Japanese page) |
| (in English) | Worm / Flow payload / Packet payload / Similarity / Intrusion Detection / / / | |
| Reference Info. | IEICE Tech. Rep., vol. 107, no. 378, IN2007-114, pp. 91-96, Dec. 2007. | |
| Paper # | IN2007-114 | |
| Date of Issue | 2007-12-06 (IN) | |
| ISSN | Print edition: ISSN 0913-5685 Online edition: ISSN 2432-6380 | |
| Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) | |
| Download PDF | IN2007-114 |
|
| Conference Information | |
| Committee | IN |
| Conference Date | 2007-12-13 - 2007-12-14 |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | Hiroshima City University |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | Internet Traffic, TCP/IP, Network Analysis/Evaluation, Netework Model, etc. |
| Paper Information | |
| Registration To | IN |
| Conference Code | 2007-12-IN |
| Language | Japanese |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | A Multi-stage Worm Detection System by Flow-wise and Packet-wise Analysis on the Similarity of Payloads |
| Sub Title (in English) | |
| Keyword(1) | Worm |
| Keyword(2) | Flow payload |
| Keyword(3) | Packet payload |
| Keyword(4) | Similarity |
| Keyword(5) | Intrusion Detection |
| Keyword(6) | |
| Keyword(7) | |
| Keyword(8) | |
| 1st Author's Name | Youhei Suzuki |
| 1st Author's Affiliation | Tohoku University (Tohoku Univ) |
| 2nd Author's Name | Yuji Waizumi |
| 2nd Author's Affiliation | Tohoku University (Tohoku Univ) |
| 3rd Author's Name | Hiroshi Tsunoda |
| 3rd Author's Affiliation | Tohoku University (Tohoku Univ) |
| 4th Author's Name | Yoshiaki Nemoto |
| 4th Author's Affiliation | Tohoku University (Tohoku Univ) |
| 5th Author's Name | |
| 5th Author's Affiliation | () |
| 6th Author's Name | |
| 6th Author's Affiliation | () |
| 7th Author's Name | |
| 7th Author's Affiliation | () |
| 8th Author's Name | |
| 8th Author's Affiliation | () |
| 9th Author's Name | |
| 9th Author's Affiliation | () |
| 10th Author's Name | |
| 10th Author's Affiliation | () |
| 11th Author's Name | |
| 11th Author's Affiliation | () |
| 12th Author's Name | |
| 12th Author's Affiliation | () |
| 13th Author's Name | |
| 13th Author's Affiliation | () |
| 14th Author's Name | |
| 14th Author's Affiliation | () |
| 15th Author's Name | |
| 15th Author's Affiliation | () |
| 16th Author's Name | |
| 16th Author's Affiliation | () |
| 17th Author's Name | |
| 17th Author's Affiliation | () |
| 18th Author's Name | |
| 18th Author's Affiliation | () |
| Speaker | Author-1 |
| Date Time | 2007-12-14 13:30:00 |
| Presentation Time | 25 minutes |
| Registration for | IN |
| Paper # | IN2007-114 |
| Volume (vol) | vol.107 |
| Number (no) | no.378 |
| Page | pp.91-96 |
| #Pages | 6 |
| Date of Issue | 2007-12-06 (IN) |
[Return to Top Page]