Oral Comprehensive Exam Details

Internet Worm Detection

Abstract

The occurrence of self-propagating network worms has decreased in recent years, but the threat that they pose to the Internet has not. Recent advances in polymorphism techniques, allergy attacks, and scanning strategies have rendered many existing worm detection mechanisms obsolete. In this talk we will examine Internet worms and their history, survey the current state-of-the-art in worm detection, and evaluate the strengths and weaknesses of each detection system. We will then discuss future research directions and important open questions in the field.