Defending worms attack through EDOWA system

• Main Authors: M.M., Saudi,, E.M., Tamil,, M.Y.I., Idris,, K., Seman,, L.M., Nasir,
• Format: Conference Paper
• Language: en_US
• Published: 2015
• Subjects: Fuzzy logic; Information technology; Internet; Activity patterns; Early warnings; Epidemic spreads; High speeds; Large networks; Network packets; Network traffics; System administrators; Worm detections; Computer crime
• Online Access: http://ddms.usim.edu.my/handle/123456789/9174

EDOWA system is a system that is capable to detect worm efficiently and provide an early warning to the system administrator. Worms are a major threat to Internet-connected hosts and networks and their nature of widespread epidemic spread needed to be detected quickly in order to contain its outbreak. In EDOWA, the frequency of network packet will be observed by the system. The wide spreading nature of worm will cause the network packet to be transfer massively over the network and cause the substantial increase in frequency. The threshold that detects the worm activity pattern will adjust accordingly to the increase of network traffic to accommodate high speed large network traffic. By having this threshold adjust accordingly, it will increase worm detection efficiency. With fuzzy logic, the degree of urgency of a warning can be defined. © 2008 IEEE.