文章基本信息

标题：BEHAVIOURAL DETECTION FOR INTERNET SCANNING WORM ATTACK
本地全文：下载
作者：Mohammad M. Rasheed
期刊名称：Computer Sciences and Telecommunications
印刷版ISSN：1512-1232
出版年度：2015
卷号：46
期号：2
页码：36-46
出版社：Internet Academy
摘要：This research introduces the analysis of the request and reply message for infected and victim machine. The problem of the research is cannot focus on specific scanning worm protocol to detect the scanning worm. The Internet worm attacks different destination victims by a used Internet protocol that support three main protocols TCP, UDP and ICMP regarding transport and control protocol, the research studied three main protocols, TCP, UDP, and ICMP that used by different scanning worms. The research focused on a request from infected machines and a reply message from the victim. The study found a new failure message that depends on the type of protocol that uses it via scanning worm.
关键词：Internet worm detection; worm behavioral; failure message; scanning worm; behavioral detection