Internet Observation with ISDAS: How Long Does a Worm Perform Scanning?

We study an estimation of average duration of malicious port-scanning attempts, which would help for an analysis the statistical survey of malicious behaviors and an application to estimate activity of worms spread. This paper reports an average duration of worm activity estimated from random sampli...

Ausführliche Beschreibung

Gespeichert in:

Bibliographische Detailangaben
Hauptverfasser:	Kobori, T., Kikuchi, H., Terada, M.
Format:	Tagungsbericht
Sprache:	eng
Schlagworte:	Availability Computer worms Frequency Information analysis Information science Information security Internet port-scan Poisson distribution Reliability engineering Sampling methods Sensor phenomena and characterization
Online-Zugang:	Volltext bestellen
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!

Beschreibung
Zusammenfassung:	We study an estimation of average duration of malicious port-scanning attempts, which would help for an analysis the statistical survey of malicious behaviors and an application to estimate activity of worms spread. This paper reports an average duration of worm activity estimated from random sampling of statistical data actually observed by the Internet Scan Data System, ISDAS.
DOI:	10.1109/ARES.2008.82