CONEXT
2007
ACM
15 years 19 days ago
2007
ACM
Network intrusion detection systems typically detect worms by examining packet or flow logs for known signatures. Not only does this approach mean worms cannot be detected until ...