Aminu Ahmad, Muhammad, Woodhead, Steve and Gan, Diane ORCID: 0000-0002-0920-7572 (2016) Early containment of fast network worm malware. In: 2016 3rd National Foundation for Science and Technology Development Conference on Information and Computer Science (NICS). IEEE. ISBN 978-1-5090-2098-0 (doi:https://doi.org/10.1109/NICS.2016.7725649)

Preview

PDF (Author's Accepted Manuscript) 15872_Woodhead_Early Containment of Fast Network Worm Malware (AAM) 2016.pdf - Accepted Version Download (241kB) | Preview

Abstract

This paper presents a countermeasure mechanism for the propagation of fast network worm malware. The mechanism uses a cross layer architecture with a detection technique at the network layer to identify worm infection and a data-link containment solution to block an identified infected host. A software prototype of the mechanism has been used to demonstrate its effective. An empirical analysis of network worm propagation has been conducted to test the mechanism. The results show that the developed mechanism is effective in containing self-propagating malware with almost no false positives.

Item Type:	Conference Proceedings
Title of Proceedings:	2016 3rd National Foundation for Science and Technology Development Conference on Information and Computer Science (NICS)
Additional Information:	Conference on Information and Computer Science (NICS) held at Danang City, Vietnam, 14-16 September 2016. Paper was presented during the CN5: Communications and Networking session on September 15, 2016.
Uncontrolled Keywords:	Containment, Worm detection, Malware, Cyber defence
Subjects:	T Technology > TK Electrical engineering. Electronics Nuclear engineering
Faculty / School / Research Centre / Research Group:	Faculty of Engineering & Science Faculty of Engineering & Science > School of Engineering (ENG) Faculty of Engineering & Science > Internet Security Research Laboratory Faculty of Engineering & Science > School of Computing & Mathematical Sciences (CMS)
Related URLs:	Organisation
Last Modified:	04 Mar 2022 13:07
URI:	http://gala.gre.ac.uk/id/eprint/15872

Actions (login required)

View Item

Downloads