Destination source correlation algorithm to monitor local networks: A worm detection technique

Abstract

Abstract The necessitate for a worldwide monitoring method for Internet worm detection is obvious. Similarly local reply and exposure inspection also understandable. Generally large set of data is used to supervise worm activity, but found tricky to relate at local network. We observe “victim number based approaches” are not stable for related networks. So what work is suitable for local network? To solve this issue, we recommend Destination Source Correlation algorithm which monitors local networks and looks into the infection rate & tracks real infected hosts to offer a precise reply. Although “HoneyStat” strategy is already been used to trace temporary infection cycle of worm.