Presentation 2004-07-21
A Proposal of Estimation Method o Magnitude of Worm Infection by using Site Level Profiling
KANBA KOIZUMI, HIDEKI KOIKE, MICHIAKI YASUMURA,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) It is neccesary to estimate the magnitude of worm infection from the log of scanning packets that come form infected hosts to observation points. In a previous research, an estimation method by feature extraction of random scanning is proposed. But such a method is not applicable to a worm that includes local scanning. In this paper, we propose an estimation method of the magnitude of worm by using site level profiling. Site level profiling is a feature extraction method of worms that includes local scanning. With the proposed method, we report the analysis results for W32.Welchia.Worm and W32.Sasser.D.Worm.
Keyword(in Japanese) (See Japanese page)
Keyword(in English)
Paper # ISEC2004-43
Date of Issue

Conference Information
Committee ISEC
Conference Date 2004/7/14(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Information Security (ISEC)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) A Proposal of Estimation Method o Magnitude of Worm Infection by using Site Level Profiling
Sub Title (in English)
Keyword(1)
1st Author's Name KANBA KOIZUMI
1st Author's Affiliation Graduate School of Media and Governance, Keio University()
2nd Author's Name HIDEKI KOIKE
2nd Author's Affiliation Graduate School of Information Systems, University of Electro-Communications
3rd Author's Name MICHIAKI YASUMURA
3rd Author's Affiliation Faculty of Environmental Information, Keio University
Date 2004-07-21
Paper # ISEC2004-43
Volume (vol) vol.104
Number (no) 200
Page pp.pp.-
#Pages 7
Date of Issue