J4 ›› 2009, Vol. 47 ›› Issue (6): 1241-1245.

Previous Articles     Next Articles

Tracing of Worm Propagation Path Correlation

ZHOU Jianqiu1,2, SHI Wei2, LI Qiang2   

  1. 1. Blood Center of Jilin Province, Changchun 130061, China;2. College of Computer Science and Technology, Jilin University, Changchun 130012, China
  • Received:2009-04-29 Online:2009-11-26 Published:2010-01-07
  • Contact: LI Qiang E-mail:li_qiang@jlu.edu.cn

Abstract:

Though worm is randomly spread, there exists implicit causality between adjacent infected nodes. Based on the analysis of causality, we presented an improved online tracing algorithmBayesian network correlation algorithm to acquire worm propagation path, and analyzed and verified its accuracy and performance through simulation experiments. Experiment result indicates that the detection accuracy of Bayesian network correlation algorithm has been increased by a factor of 10% compared to that of our previous work, this improved algorithm is more suitable for online detection.

Key words: worm, propagation path, correlation, Bayesian network

CLC Number: 

  • TP393