Abstract: Fast spreading of worms has presented one of the major threats to the internet security and this tendency is increasingly fierce. To overcome the deficient sensitivity to time interval based on Kalman filter worm detection, a new worm early detection method and response mechanism were proposed. This early detection method is based on the epidemic worm propagation model and has multideferent intervals based on Kalman filter. Experiment simulation shows that the proposed detection method and response mechanism can effectively slow down the rapid propagation of internet worms in a large scope.

Key words: computer systems organization, worm, early detection, Kalman filter, worm propagation model