Abstract. Worm detection systems have traditionally used global strategies and focused on scan rates. The noise associated with this approach requires ...
We describe HoneyStat, which uses modified honeypots to generate a highly accurate alert stream with low false positive rates. Unlike traditional highly- ...
A system for detecting scanning-worm infected machines in a local network based on the Billy Goat worm-detection system and it can easily be used with other ...
David et al. [4] designed the HoneyStat system for the scene of worm propagation on LAN, which can detect and suppress worm outbreak in the initial stage.
... Don't Become a Stat …Use Honeystat” by Justin Miller. HoneyStat: Local Worm Detection Using Honeypots. 15. HoneyStat: Local Worm Detection Using Honeypots.
HoneyStat: Local Worm Detection Using Honeypots · David Dagon, Xinzhou Qin, Guofei Gu, Wenke Lee, · Georgia Institute of Technology · Keywords: Honeypots, ...
Bibliographic details on HoneyStat: Local Worm Detection Using Honeypots.
We demonstrate HoneyStat's improvements over previous worm detection techniques. First, using trace files from worm attacks on small networks, we demonstrate ...
This thesis describes a project that utilizes honeypots to detect worms. A detailed description of existing worm detection techniques using honeypots.
Unlike traditional honeypots, HoneyStat nodes are minimal, script-driven and cover a large IP space. The HoneyStat nodes generate three classes of alerts: ...