Presentation 2007-07-20
Proposal for the quantitative method of searching characteristics of node
Hirofumi NAKAKOJI, Masato TERADA, Seiichi SUSAKI,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Information about the network worms, such as how they exploit vulnerabilities, infection symptoms, how to remove them, is widely published, but "worm propagation characteristics" how they behave on the networks to cause infection are hardly provided. Among other characteristics, the way a worm looks for potential targets is especially beneficial in estimating the infection rate and range. It would also help network managers in implementing countermeasures to protect their network and the Internet itself, but the information needed is not sufficiently available. On the technical side, quantifying the characteristics is a key task to make a comparison with the past worms or develop a detection technique using the target-searching characteristics. In this paper, we present a method to quantify periodic patterns the worms exhibit when looking for the targets, and the range and randomness of IP addresses they target. Furthermore, we show the effectiveness of our approach through worm categorization and comparison based on the quantified target-searching characteristics of the worms.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) worms / target-searching characteristics / quantitative
Paper # ISEC2007-50
Date of Issue

Conference Information
Committee ISEC
Conference Date 2007/7/13(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Information Security (ISEC)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Proposal for the quantitative method of searching characteristics of node
Sub Title (in English)
Keyword(1) worms
Keyword(2) target-searching characteristics
Keyword(3) quantitative
1st Author's Name Hirofumi NAKAKOJI
1st Author's Affiliation Systems Development Laboratory, Hitachi, Ltd.()
2nd Author's Name Masato TERADA
2nd Author's Affiliation Systems Development Laboratory, Hitachi, Ltd.
3rd Author's Name Seiichi SUSAKI
3rd Author's Affiliation Systems Development Laboratory, Hitachi, Ltd.
Date 2007-07-20
Paper # ISEC2007-50
Volume (vol) vol.107
Number (no) 141
Page pp.pp.-
#Pages 6
Date of Issue