首页>
外国专利>
Using behavior blocking mobility tokens to facilitate distributed worm detection
Using behavior blocking mobility tokens to facilitate distributed worm detection
展开▼
机译:使用行为阻止移动性令牌来促进分布式蠕虫检测
展开▼
页面导航
摘要
著录项
相似文献
摘要
Behavior blocking mobility token managers track movement of suspicious files within a network. A behavior blocking mobility token manager on a source computer detects an attempt by a process on the source computer to write a file to a target computer. The behavior blocking mobility token manager determines a suspicion level associated with the process, and writes a behavior blocking mobility token containing at least the suspicion level associated with the process to the target computer. A behavior blocking mobility token manager on the target computer detects that a behavior blocking mobility token is being written to the target computer. The behavior blocking mobility token manager reads the behavior blocking mobility token, and determines a suspicion level of the file associated with the behavior blocking mobility token, responsive to contents of the behavior blocking mobility token.
展开▼