Automatic Defense Against Zero-day Polymorphic Worms in Communication Networks

• Main Author: Mohammed, Mohssen
• Format: eBook
• Language: English
• Published: United Kingdom Auerbach Publications 2013; CRC Press; Auerbach Publishers, Incorporated
• Edition: 2
• Subjects: Computer algorithms; Computer networks; Computer viruses; Data processing Computer science; Machine theory; Security measures; Approximate String Matching; Packet Filtering; Worm Body; Ubuntu Linux; Low Interaction Honeypot; Bus Topology; IP Address; Dual Ring Topology; Tcp Port; VMware GSX Server; Worm Signature; Factor Graphs; Supervise Ml; Signature Generation Process; Stateful Protocol Analysis; Address Space; GSX Server; Decryption Routine; Sensitive Information; High Interaction Honeypot; Outbound Connections; Polymorphic Worms; Research Honeypots; Cd Rom Drive; VMware Workstation
• ISBN: 9781466557284; 1466557281; 9781466557277; 1466557273; 9780367380038; 036738003X
• DOI: 10.1201/b14912

Polymorphic worm attacks are considered one of the top threats to Internet security. They can be used to delay networks, steal information, delete information, and launch flooding attacks against servers. This book supplies unprecedented coverage of how to generate automated signatures for unknown polymorphic worms. Describing attack detection approaches and automated signature generation systems, the book details the design of double-honeynet systems and the experimental investigation of these systems. It also discusses experimental implementation of signature-generation algorithms and discusses what we can expect in future developments.