d-ACTM: Distributed anomaly connection tree method to detect silent worms

Nobutaka Kawaguchi; Hiroshi Shigeno; Ken Ichi Okada

doi:10.1109/PCCC.2007.358934

d-ACTM: Distributed anomaly connection tree method to detect silent worms

Nobutaka Kawaguchi, Hiroshi Shigeno, Ken Ichi Okada

情報工学科

研究成果: Conference contribution

抄録

This paper proposes a distributed network based worm detection method, d-ACTM, to detect a kind of hit-list worm named Silent worm. The worm propagation behavior in the network is expressed as a tree-like structure composed of the infected hosts and the infection connections. d-ACTM detects the existence of worms by detecting the tree structures composed of anomaly connections in a distributed manner. The sim,ulation result shows that d-ACTM can detect Silent worms before 7% of all vulnerable hosts are infected under the condition where the infection interval is equals to the normal connection interval.

本文言語	English
ホスト出版物のタイトル	27th IEEE International Performance Computing and Communications Conference, IPCCC 07
ページ	510-517
ページ数	8
DOI	https://doi.org/10.1109/PCCC.2007.358934
出版ステータス	Published - 2007 11 27
イベント	27th IEEE International Performance Computing and Communications Conference, IPCCC 07 - New Orleans, LA, United States 継続期間: 2007 4 11 → 2007 4 13

出版物シリーズ

名前	Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference

Other

Other	27th IEEE International Performance Computing and Communications Conference, IPCCC 07
国/地域	United States
City	New Orleans, LA
Period	07/4/11 → 07/4/13

ASJC Scopus subject areas

工学（全般）

文献へのアクセス

10.1109/PCCC.2007.358934

他のファイルとリンク

引用スタイル

Kawaguchi, N., Shigeno, H., & Okada, K. I. (2007). d-ACTM: Distributed anomaly connection tree method to detect silent worms. In 27th IEEE International Performance Computing and Communications Conference, IPCCC 07 (pp. 510-517). [4197970] (Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference). https://doi.org/10.1109/PCCC.2007.358934

d-ACTM : Distributed anomaly connection tree method to detect silent worms. / Kawaguchi, Nobutaka; Shigeno, Hiroshi; Okada, Ken Ichi.

27th IEEE International Performance Computing and Communications Conference, IPCCC 07. 2007. p. 510-517 4197970 (Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference).

研究成果: Conference contribution

Kawaguchi, N, Shigeno, H & Okada, KI 2007, d-ACTM: Distributed anomaly connection tree method to detect silent worms. in 27th IEEE International Performance Computing and Communications Conference, IPCCC 07., 4197970, Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference, pp. 510-517, 27th IEEE International Performance Computing and Communications Conference, IPCCC 07, New Orleans, LA, United States, 07/4/11. https://doi.org/10.1109/PCCC.2007.358934

Kawaguchi N, Shigeno H, Okada KI. d-ACTM: Distributed anomaly connection tree method to detect silent worms. In 27th IEEE International Performance Computing and Communications Conference, IPCCC 07. 2007. p. 510-517. 4197970. (Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference). https://doi.org/10.1109/PCCC.2007.358934

@inproceedings{6c369fa11d784f18b86fcc99a5cae7eb,

title = "d-ACTM: Distributed anomaly connection tree method to detect silent worms",

abstract = "This paper proposes a distributed network based worm detection method, d-ACTM, to detect a kind of hit-list worm named Silent worm. The worm propagation behavior in the network is expressed as a tree-like structure composed of the infected hosts and the infection connections. d-ACTM detects the existence of worms by detecting the tree structures composed of anomaly connections in a distributed manner. The sim,ulation result shows that d-ACTM can detect Silent worms before 7% of all vulnerable hosts are infected under the condition where the infection interval is equals to the normal connection interval.",

author = "Nobutaka Kawaguchi and Hiroshi Shigeno and Okada, {Ken Ichi}",

year = "2007",

month = nov,

day = "27",

doi = "10.1109/PCCC.2007.358934",

language = "English",

isbn = "1424411386",

series = "Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference",

pages = "510--517",

booktitle = "27th IEEE International Performance Computing and Communications Conference, IPCCC 07",

note = "27th IEEE International Performance Computing and Communications Conference, IPCCC 07 ; Conference date: 11-04-2007 Through 13-04-2007",

}

TY - GEN

T1 - d-ACTM

T2 - 27th IEEE International Performance Computing and Communications Conference, IPCCC 07

AU - Kawaguchi, Nobutaka

AU - Shigeno, Hiroshi

AU - Okada, Ken Ichi

PY - 2007/11/27

Y1 - 2007/11/27

N2 - This paper proposes a distributed network based worm detection method, d-ACTM, to detect a kind of hit-list worm named Silent worm. The worm propagation behavior in the network is expressed as a tree-like structure composed of the infected hosts and the infection connections. d-ACTM detects the existence of worms by detecting the tree structures composed of anomaly connections in a distributed manner. The sim,ulation result shows that d-ACTM can detect Silent worms before 7% of all vulnerable hosts are infected under the condition where the infection interval is equals to the normal connection interval.

AB - This paper proposes a distributed network based worm detection method, d-ACTM, to detect a kind of hit-list worm named Silent worm. The worm propagation behavior in the network is expressed as a tree-like structure composed of the infected hosts and the infection connections. d-ACTM detects the existence of worms by detecting the tree structures composed of anomaly connections in a distributed manner. The sim,ulation result shows that d-ACTM can detect Silent worms before 7% of all vulnerable hosts are infected under the condition where the infection interval is equals to the normal connection interval.

UR - http://www.scopus.com/inward/record.url?scp=36349025769&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=36349025769&partnerID=8YFLogxK

U2 - 10.1109/PCCC.2007.358934

DO - 10.1109/PCCC.2007.358934

M3 - Conference contribution

AN - SCOPUS:36349025769

SN - 1424411386

SN - 9781424411382

T3 - Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference

SP - 510

EP - 517

BT - 27th IEEE International Performance Computing and Communications Conference, IPCCC 07

Y2 - 11 April 2007 through 13 April 2007

ER -