By Topic

Fast and accurate detection for polymorphic worms

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$31 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

5 Author(s)
Mohammed, M.M.Z.E. ; Dept. of Electr. Eng., Univ. of Cape Town Rondebosch, Cape Town, South Africa ; Chan, H.A. ; Ventura, N. ; Hashim, M.
more authors

Computer worms pose a real threat to the Internet security, and their automatic nature makes them powerful and destructive. In this paper we propose fast and accurate detection system for Zero-day polymorphic worms. We have designed a novel double-honeynet system, which is able to detect new worms that have not been seen before. We apply Principal Component Analysis (PCA) to reduce the dimension of worm payloads such that only the most probable signatures of the worm will be obtained. The experimental results show that the PCA has successfully detected polymorphic worms with zero false positives and low false negatives.

Published in:

Internet Technology and Secured Transactions (ICITST), 2010 International Conference for

Date of Conference:

8-11 Nov. 2010