首页>
外国专利>
Method and Apparatus to Facilitate Generating Worm-Detection Signatures Using Data Packet Field Lengths
Method and Apparatus to Facilitate Generating Worm-Detection Signatures Using Data Packet Field Lengths
展开▼
机译:使用数据分组字段长度促进生成蠕虫检测签名的方法和装置
展开▼
页面导航
摘要
著录项
相似文献
摘要
Network-level data traffic comprising data packets, wherein at least some of the data packets have at least one field of unbounded length, are received (101). A worm-detection signature is then generated (102) as a function, at least in part, of the lengths of particular data packet fields. So configured, these teachings are particularly suitable for use in detecting worms that seek to exploit the use of an unbounded field in a data packet to overwhelm buffer memory in a receiving network element as a basis for installing the worm's code.
展开▼