DOI QR코드

DOI QR Code

Implementation of Engine Generating Mutation Worm Signature Using LCSeq

LCSeq를 이용한 변형 웜 시그니쳐 생성 엔진 구현

  • 고준상 (한남대학교 컴퓨터공학과) ;
  • 이재광 (한남대학교 컴퓨터공학과) ;
  • 김봉한 (청주대학교 컴퓨터정보공학과)
  • Published : 2007.11.30

Abstract

We introduce the way to detect the mutation worm. We implemented the program that can generate signature using LCSeq(Longest Common Subsequence) technique in Suffix Tree studied as pattern recognition algorithm. We also showed the process to detect the mutation of CodeRed worm and Nimda worm and evaluated signatures generated by snort and LCSeq.

Keywords

LCSeq;Mutation Worm Detection;Worm Signature