An Investigation Towards Worms Detection Approaches over Network

Abstract

Nowadays, worms and other outside threats in the network recognized to be a serious and unexpected behavior. The main issue was addressed based on the behavioral patterns of worms that reflect application communications typical of worms. This representation of worm's behavior differs from those used in contemporary enterprise postures, which reliance on a particular type of signature-based intrusion detection and the behavioral detection approach contrasts from this form of signature-based detection. Thus, this paper introduced the traditional worm's detection approaches. Meanwhile, the paper suggested a worm detection approach based on worm behaviors that consist on network scanning detection approach, network worm's correlation approach, and signature correlation approach.