A smart IDS and response system for the internet malicious worm. (11th November 2005)

• Record Type: Journal Article
• Authors: Hung, Jason C.; Wang, Chun-Chia; Hung, Lun-Ping; Chang, Anthony Y.; , Yi-Chun Liao
• Is Part Of: International journal of wireless and mobile computing. Volume 1:Number 1(2005)
• Page Start: 70
• Page End: 77
• Publication Date: 2005-11-11
• Subjects: lambent anti-worm system -- LAWS -- mobile agent -- malicious worm -- intrusion detection system -- IDS -- cooperated defence system -- CDS -- internet; Mobile computing -- Periodicals; Wireless communication systems -- Periodicals; 004.6
• Languages: English
• ISSNs: 1741-1084

Abstract

In this paper, we proposed a behaviour-based intrusion detection and response system for the internet worm. The LAWS (Lambent Anti-Worm System) can detect the intruded services and influenced range automatically. Besides, it also can analyse the key information of the intrusion. The worm can attack a large number of computers via a network in a very short period, especially distributed damage via the network services. Those worms always enter or attack computers by the backdoor or under-channel. There is no effective solution to prevent the damage caused by worms. We can stop the worm's distribution and intrusion in advance according to the information from LAWS. In addition to detecting and preventing the distribution of well-known malicious worms, the LAWS can also defend against the future unknown, or new malicious worms. Mobile agents will help the LAWS to form a cooperated defence system (CDS) for other LAWS's users over the internet. The contribution of our system is to decrease the response time of attack and reduce the damaged range. At the same time, it also diminishes the damage and decreases the fixed cost.