By Topic

Anting: An Adaptive Scanning Method for Computer Worms

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$31 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

2 Author(s)
Yi Tang ; Dept. of Inf. Sci., Guangzhou Univ. ; Xiangning Dong

Computer worms can self-propagate over a network and are becoming a critical risk to the network based applications. To propagate over the network, the worms need to scan many IP addresses to find vulnerable hosts. This paper addresses the worm scanning strategies with subsidiary information. Inspired by the natural ants, we propose an adaptive scanning method, named Anting, for worms. To perform focused scanning on the parts of most clustered vulnerable systems, each worm record some scanning results to help deciding its next scanning direction. The new born worms can also inherit those results from its parent worms. Each worm decides its scanning direction on its local estimation to the densities of reachable addresses or vulnerable hosts in different parts of subspaces. The simple individual behaviors of worms are aggregated as a collective behavior in global to perform efficient scanning. We argue that this scanning method is more efficient when the vulnerable hosts are not uniformly distributed. We also conduct some simulated experiments to validate this method

Published in:

Web Intelligence, 2006. WI 2006. IEEE/WIC/ACM International Conference on

Date of Conference:

18-22 Dec. 2006