| Paper Abstract and Keywords |
| Presentation |
2005-11-17 15:25
Detection of worm-infected hosts by communication pattern analysis
Tatsuya Mori, Ryoichi Kawahara, Noriaki Kamiyama, Keisuke Ishibashi, Takeo Abe (NTT) |
| Abstract |
(in Japanese) |
(See Japanese page) |
| (in English) |
This paper develops a new method, which detects worm-infected hoststhrough the analysis of communication pattern of each host. Our approach follows a two-stage strategy. We first introduce the quantitative definition of communication pattern. We show that the worm-infected hosts exhibit intrinsic characteristics of communication pattern, and they can be classified from those of other hosts, through the cluster analysis. We then propose a method to detect worm-infected hosts by applying the defined communication pattern to the Naive Bayesian Classifier (NBC). We validate the accuracy of our method with measured traffic data. |
| Keyword |
(in Japanese) |
(See Japanese page) |
| (in English) |
measurement / worm / detection / communication pattern / cluster analysis / Bayesian classification / / |
| Reference Info. |
IEICE Tech. Rep., vol. 105, no. 406, CQ2005-67, pp. 1-6, Nov. 2005. |
| Paper # |
CQ2005-67 |
| Date of Issue |
2005-11-10 (NS, CQ, TM) |
| ISSN |
Print edition: ISSN 0913-5685 |
| Download PDF |
|
| Conference Information |
| Committee |
ICM NS CQ |
| Conference Date |
2005-11-17 - 2005-11-18 |
| Place (in Japanese) |
(See Japanese page) |
| Place (in English) |
Kunibiki-messe (Matsue city) |
| Topics (in Japanese) |
(See Japanese page) |
| Topics (in English) |
NW performance management, NW quality, etc. |
| Paper Information |
| Registration To |
CQ |
| Conference Code |
2005-11-TM-NS-CQ |
| Language |
Japanese |
| Title (in Japanese) |
(See Japanese page) |
| Sub Title (in Japanese) |
(See Japanese page) |
| Title (in English) |
Detection of worm-infected hosts by communication pattern analysis |
| Sub Title (in English) |
|
| Keyword(1) |
measurement |
| Keyword(2) |
worm |
| Keyword(3) |
detection |
| Keyword(4) |
communication pattern |
| Keyword(5) |
cluster analysis |
| Keyword(6) |
Bayesian classification |
| Keyword(7) |
|
| Keyword(8) |
|
| 1st Author's Name |
Tatsuya Mori |
| 1st Author's Affiliation |
Nippon Telegraph and Telephone Corporation (NTT) |
| 2nd Author's Name |
Ryoichi Kawahara |
| 2nd Author's Affiliation |
Nippon Telegraph and Telephone Corporation (NTT) |
| 3rd Author's Name |
Noriaki Kamiyama |
| 3rd Author's Affiliation |
Nippon Telegraph and Telephone Corporation (NTT) |
| 4th Author's Name |
Keisuke Ishibashi |
| 4th Author's Affiliation |
Nippon Telegraph and Telephone Corporation (NTT) |
| 5th Author's Name |
Takeo Abe |
| 5th Author's Affiliation |
Nippon Telegraph and Telephone Corporation (NTT) |
| 6th Author's Name |
|
| 6th Author's Affiliation |
() |
| 7th Author's Name |
|
| 7th Author's Affiliation |
() |
| 8th Author's Name |
|
| 8th Author's Affiliation |
() |
| 9th Author's Name |
|
| 9th Author's Affiliation |
() |
| 10th Author's Name |
|
| 10th Author's Affiliation |
() |
| 11th Author's Name |
|
| 11th Author's Affiliation |
() |
| 12th Author's Name |
|
| 12th Author's Affiliation |
() |
| 13th Author's Name |
|
| 13th Author's Affiliation |
() |
| 14th Author's Name |
|
| 14th Author's Affiliation |
() |
| 15th Author's Name |
|
| 15th Author's Affiliation |
() |
| 16th Author's Name |
|
| 16th Author's Affiliation |
() |
| 17th Author's Name |
|
| 17th Author's Affiliation |
() |
| 18th Author's Name |
|
| 18th Author's Affiliation |
() |
| 19th Author's Name |
|
| 19th Author's Affiliation |
() |
| 20th Author's Name |
|
| 20th Author's Affiliation |
() |
| Speaker |
Author-1 |
| Date Time |
2005-11-17 15:25:00 |
| Presentation Time |
25 minutes |
| Registration for |
CQ |
| Paper # |
NS2005-113, CQ2005-67, TM2005-28 |
| Volume (vol) |
vol.105 |
| Number (no) |
no.405(NS), no.406(CQ), no.407(TM) |
| Page |
pp.13-18(NS), pp.1-6(CQ), pp.1-6(TM) |
| #Pages |
6 |
| Date of Issue |
2005-11-10 (NS, CQ, TM) |
|