Worm path identification using visualization system

Seiji Shibaguchi, Yuki Nakayama, Ken Ichi Okada

研究成果: Conference contribution

1 被引用数 (Scopus)

抄録

In this paper, we propose a visualization system for worm investigation, which finds worm origins and worm paths. Although investigation of worms are very important for forensic use and further prevention, it is quite difficult for automatic systems to identify worm origins or paths due to the trade-off between false positives and false negatives. Therefore, we focused on interaction between analysts and connection logs. At first, an automated algorithm is run so that there are no false negatives, and then analysts investigate the result to reduce false positives by visualized system. We aim to solve the trade-off by conducting these two steps. We implemented a prototype and conducted a user experiment to evaluate our system. The results show our system enabled subjects to reduce 90% of false detection by an automated algorithm. Although the results depend on parameters or conditions, we show the effectiveness of our idea.

本文言語English
ホスト出版物のタイトルProceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009 - 2009 IEEE International Conference on Privacy, Security, Risk, and Trust, PASSAT 2009
ページ498-503
ページ数6
DOI
出版ステータスPublished - 2009 12 4
イベント2009 IEEE International Conference on Privacy, Security, Risk, and Trust, PASSAT 2009 - Vancouver, BC, Canada
継続期間: 2009 8 292009 8 31

出版物シリーズ

名前Proceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009
3

Other

Other2009 IEEE International Conference on Privacy, Security, Risk, and Trust, PASSAT 2009
CountryCanada
CityVancouver, BC
Period09/8/2909/8/31

ASJC Scopus subject areas

  • Computational Theory and Mathematics
  • Computer Science Applications
  • Software

フィンガープリント 「Worm path identification using visualization system」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル