Method of detecting network worms

Details Method of detecting network worms Method of detecting network worms

2005-06-16

2009-02-10

Barron, Jr., Gilberto (Department: 2132)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

Reexamination Certificate

active

07490355

ABSTRACT:
A method of detecting network worms include the following steps: (1) Profiling the TCP connection information collected from the protected network, quantifying the plurality of statuses contained in the TCP connection information; (2) Clustering the connection profiles to discover all the anomaly clusters that are specified by the condition composing of several adaptive thresholds; (3) Correlating the anomaly clusters to result in a new cluster graph or to extend an existing cluster graph; (4) Issuing a security incident about the worm propagation according to the propagation condition that also composes of several adaptive thresholds; and (5) Keeping and maintaining the status of the cluster graphs.

REFERENCES:
patent: 2006/0173992 (2006-08-01), Weber et al.

Affiliated with

Also associated with

Rating

Method of detecting network worms does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method of detecting network worms, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method of detecting network worms will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4110578