2008 Third International Conference on Availability, Reliability and Security
Internet Observation with ISDAS: How Long Does a Worm Perform Scanning?
March 04-March 07
ISBN: 978-0-7695-3102-1
We study an estimation of average duration of malicious port-scanning attempts, which would help for an analysis the statistical survey of malicious behaviors and an application to estimate activity of worms spread. This paper reports an average duration of worm activity estimated from random sampling of statistical data actually observed by the Internet Scan Data System, ISDAS.
Index Terms:
port-scan Poisson distribution
Citation:
Tomohiro Kobori, Hiroaki Kikuchi, Masato Terada, "Internet Observation with ISDAS: How Long Does a Worm Perform Scanning?," ares, pp.1282-1286, 2008 Third International Conference on Availability, Reliability and Security, 2008