15 search results - page 1 / 3 » A monitoring system for detecting repeated packets with appl... |
IJISEC
2006
13 years 4 months ago
2006
Abstract We present a monitoring system which detects repeated packets in network traffic, and has applications including detecting computer worms. It uses Bloom filters with count...
LCN
2005
IEEE
13 years 10 months ago
2005
IEEE
—TCP/IP protocol suite carries most application data in Internet. TCP flow retrieval has more security meanings than the IP packet payload. Hence, monitoring the TCP flow has mor...
WORM
2003
13 years 5 months ago
2003
This paper presents DOME, a host-based technique for detecting several general classes of malicious code in software executables. DOME uses static analysis to identify the locatio...
EUROSYS
2007
ACM
14 years 1 months ago
2007
ACM
The vulnerabilities which plague computers cause endless grief to users. Slammer compromised millions of hosts in minutes; a hit-list worm would take under a second. Recently prop...
APNOMS
2006
Springer
13 years 8 months ago
2006
Springer
Traffic monitoring is essential for accounting user traffic and detecting anomaly traffic such as Internet worms or P2P file sharing applications. Since typical Internet traffic mo...