The application system for network worm detecting is designed, as well the prototype is constructed. The distributed structure is adopted to monitor the unknown worms at real-time, analyse the network stream, bring up the signature of worm spreading to identify that the unknown worms erupt in local network. The worm detection system could be applied as a significant aspect of network security architecture to secure the local network system.
1Steve W.Open problems in computer virus research. http://www.research.ibm.com/antivirus/SciPapers/White/Problems/ Problems.html(Accessed Sept.10,2005)
2Jose Nazario, Jeremy Anderson, Rick Wash, Chris Connelly. The Future of Internet Worms. Presented at the Blackhat Briefings, July, 2001, Las Vegas
3Cliff Changchun Zou, Weibo Gong, Don Towsley. Code Red Worm Propagation Modeling and Analysis. 9th ACM Conference on Computer and Communication Security, Nov. 18-22,2002
4Staniford S,Paxson V,Weaver N. How to Own the Internet in Your Spare Time. 11th Usenix Security Symposium, San Francisco, August 2002
5Lockwood J W, Moscola J, Kulig M. Internet worm and virus protection in dynamically reconfigurable hardware， WORM 2003
