A copy of this work was available on the public web and has been preserved in the Wayback Machine. The capture dates from 2005; you can also visit the original URL.
The file type is application/pdf
.
HoneyStat: Local Worm Detection Using Honeypots
[chapter]
2004
Lecture Notes in Computer Science
Worm detection systems have traditionally used global strategies and focused on scan rates. The noise associated with this approach requires statistical techniques and large data sets (e.g., 2 20 monitored machines) to yield timely alerts and avoid false positives. Worm detection techniques for smaller local networks have not been fully explored. We consider how local networks can provide early detection and compliment global monitoring strategies. We describe HoneyStat, which uses modified
doi:10.1007/978-3-540-30143-1_3
fatcat:fkwgy66b4vcijh6gkgcighxq4u