Home

About

Advanced Search

Browse by Discipline

Scientific Societies

E-print Alerts

Add E-prints

E-print Network
FAQHELPSITE MAPCONTACT US


  Advanced Search  

 
On the Detection and Origin Identification of Mobile Worms Sandeep Sarat Andreas Terzis
 

Summary: On the Detection and Origin Identification of Mobile Worms
Sandeep Sarat Andreas Terzis
Computer Science Department
Johns Hopkins University
Baltimore, MD, USA
{sarat,terzis}@cs.jhu.edu
ABSTRACT
Mobility can be exploited to spread malware among wire-
less nodes moving across network domains. Because such
mobile worms spread across domains by exploiting the phys-
ical movement of mobile nodes, they cannot be contained by
existing defenses. In this paper we address this new chal-
lenge using techniques for detecting the existence of stealthy
mobile worms in the early stages of their infection and iden-
tifying the origins of such infections.
The proposed mechanisms are based on random moon-
walks which were originally used in post mortem analysis of
Internet worms. However as we demonstrate, the original
technique fails against mobile worms which are inherently
stealthier than existing malware. In this paper, we extend

  

Source: Amir, Yair - Department of Computer Science, Johns Hopkins University

 

Collections: Computer Technologies and Information Sciences