CONEXT
2007
ACM
13 years 6 months ago
2007
ACM
Network intrusion detection systems typically detect worms by examining packet or flow logs for known signatures. Not only does this approach mean worms cannot be detected until ...