Abstract. Worm detection systems have traditionally used global strategies and focused on scan rates. The noise associated with this approach requires ...

We describe HoneyStat, which uses modified honeypots to generate a highly accurate alert stream with low false positive rates. Unlike traditional highly- ...

A system for detecting scanning-worm infected machines in a local network based on the Billy Goat worm-detection system and it can easily be used with other ...

David et al. [4] designed the HoneyStat system for the scene of worm propagation on LAN, which can detect and suppress worm outbreak in the initial stage.

... Don't Become a Stat …Use Honeystat” by Justin Miller. HoneyStat: Local Worm Detection Using Honeypots. 15. HoneyStat: Local Worm Detection Using Honeypots.

HoneyStat: Local Worm Detection Using Honeypots · David Dagon, Xinzhou Qin, Guofei Gu, Wenke Lee, · Georgia Institute of Technology · Keywords: Honeypots, ...

Bibliographic details on HoneyStat: Local Worm Detection Using Honeypots.

We demonstrate HoneyStat's improvements over previous worm detection techniques. First, using trace files from worm attacks on small networks, we demonstrate ...

This thesis describes a project that utilizes honeypots to detect worms. A detailed description of existing worm detection techniques using honeypots.

Unlike traditional honeypots, HoneyStat nodes are minimal, script-driven and cover a large IP space. The HoneyStat nodes generate three classes of alerts: ...