首页>
外国专利>
PROACTIVE WORM CONTAINMENT (PWC) FOR ENTERPRISE NETWORKS
PROACTIVE WORM CONTAINMENT (PWC) FOR ENTERPRISE NETWORKS
展开▼
机译:企业网络的主动蠕虫控制(PWC)
展开▼
页面导航
摘要
著录项
相似文献
摘要
A proactive worm containment (PWC) solution for enterprises uses a sustained faster-than-normal outgoing connection rate to determine if a host is infected. Two novel white detection techniques are used to reduce false positives, including a vulnerability time window lemma to avoid false initial containment, and a relaxation analysis to uncontain (or unblock) those mistakenly contained (or blocked) hosts, if there are any. The system integrates seamlessly with existing signature-based or filter-based worm scan filtering solutions. Nevertheless, the invention is signature free and does not rely on worm signatures. Nor is it protocol specific, as the approach performs containment consistently over a large range of worm scan rates. It is not sensitive to worm scan rate and, being a network-level approach deployed on a host, the system requires no changes to the host's OS, applications, or hardware.
展开▼