Skip to main content
SpringerLink
Log in

The Multi-fractal Nature of Worm and Normal Traffic at Individual Source Level

  • Conference paper
Intelligence and Security Informatics (ISI 2005)

Part of the book series: Lecture Notes in Computer Science ((LNISA,volume 3495))

Included in the following conference series:

  • 4017 Accesses

Abstract

Worms have been becoming a serious threat in web age because worms can cause huge loss due to the fast-spread property. To detect worms effectively, it is important to investigate the characteristics of worm traffic at individual source level. We model worm traffic with the multi-fractal process, and compare the multi-fractal property of worm and normal traffics at individual source level. The results show that the worm traffic possesses less multi-fractal property.

This work is supported by a grant from Zhejiang Provincial Natural Science Foundation (No.Y104437), Hubei Provincial Natural Science Foundation (No. 2004ABA018), Science and Technology Program of Hubei Provincial Department of Education (No. 2004D005), and Science and Technology Program of Hubei Provincial Department of Education (No. D200523007).

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 84.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 109.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Similar content being viewed by others

References

  1. CERT, CERT advisory CA-2003-20 w32-blaster worm (2003), http://www.cert.org/advisories/CA-2003-20.html

  2. CCERT, CCERT advisory of security (2003), http://www.ccert.edu.cn/notice/advisory.htm

  3. Leland, W.E., Willinger, W., Taqqu, M.S., Wilson, D.V.: On the self-similar nature of ethernet traffic. ACM SIGCOMM Computer Communication Review 25(1), 202–213 (1995)

    Article  Google Scholar 

  4. Willinger, W., Taqqu, M.S., Sherman, R., Wilson, D.V.: Self-similarity through high-variability: Statistical analysis of ethernet LAN traffic at the source level. IEEE/ACM Transactions on Networking 5(1), 71–86 (1997)

    Article  Google Scholar 

  5. Crovella, M.E., Bestavros, A.: Self-similarity in world wide web traffic: Evidence and possible causes. IEEE/ACM Transactions on Networking 5(6), 835–846 (1997)

    Article  Google Scholar 

  6. Garrett, M.W., Willinger, W.: Analysis, modeling and generation of self-similar VBR video traffic. ACM SIGCOMM Computer Communication Review 24(4), 269–280 (1994)

    Article  Google Scholar 

  7. Paxson, V., Floyd, S.: Wide area traffic: The failure of poisson modeling. IEEE/ACM Trans. Networking 3(3), 226–244 (1995)

    Article  Google Scholar 

  8. Mannersalo, P., Norros, I.: Multifractal analysis of real ATM traffic: a first look (1997), http://www.vtt.fi/tte/tte21/cost257/multifaster.ps.gz

  9. Riedi, R.H., Vehel, J.L.: Multifractal properties of TCP traffic: a numerical study (1997), http://www.stat.rice.edu/~riedi/Publ/ts.ps.gz

  10. Cowie, J., Ogielski, A.T., Premore, B., Yuan, Y.: Global routing instabilities triggered by codered II and nimda worm attacks (2001), http://www.renesys.com/projects/bgp_instability

  11. Krugel, C., Toth, T., Kirda, E.: Service specific anomaly detection for network intrusion detection. In: Proc. of ACM Symposium on Applied Computing, March 2002, pp. 201–208 (2002)

    Google Scholar 

  12. Schleifer, W., Mannle, M.: Online error detection through observation of traffic self-similarity. Proc. of IEE on Communications 148, 38–42 (2001)

    Article  Google Scholar 

  13. Tang, Y., Luo, X., Yang, Z.: Fault detection through multi-fractal nature of traffic. Proc. of IEEE on Communications, Circuits and Systems and West Sino Expositions 1, 695–699 (2002)

    Article  Google Scholar 

  14. Riedi, R.H.: Multifractal processes (2002), http://www.stat.rice.edu/~riedi/Publ/mp.ps.gz

  15. FRACTALES group, Fraclab: A fractal analysis toolbox for signal and image processing (2001), http://fractales.inria.fr/index.php?page=download_fraclab

Download references

Author information

Authors and Affiliations

  1. College of Computer Science and Technology, Zhejiang University, Hangzhou, 310027, P.R.China

    Yufeng Chen, Yabo Dong, Dongming Lu & Yunhe Pan

Authors
  1. Yufeng Chen
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Yabo Dong
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Dongming Lu
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Yunhe Pan
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Department of Library and Information Science, Rutgers University,  

    Paul Kantor

  2. School of Communication, Information and Library Studies, Rutgers University, 4 Huntington Street, 08901-1071, New Brunswick, NJ, USA

    Gheorghe Muresan

  3. Artificial Solutions, Altonaer Poststraße 13b, 22767, Hamburg, Germany

    Fred Roberts

  4. MIS Department, University of Arizona, 85721, Tucson, AZ, USA

    Daniel D. Zeng

  5. Institute of Automation, Chinese Academy of Sciences, Beijing, China

    Fei-Yue Wang

  6. Department of Management Information Systems, Eller College of Management, The University of Arizona, 85721, AZ, USA

    Hsinchun Chen

  7. College of Computing, Georgia Tech Information Security Center, Georgia Institute of Technology, 801 Atlantic Drive, 30332-0280, Atlanta, GA, USA

    Ralph C. Merkle

Rights and permissions

Reprints and permissions

Copyright information

© 2005 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Chen, Y., Dong, Y., Lu, D., Pan, Y. (2005). The Multi-fractal Nature of Worm and Normal Traffic at Individual Source Level. In: Kantor, P., et al. Intelligence and Security Informatics. ISI 2005. Lecture Notes in Computer Science, vol 3495. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11427995_50

Download citation

  • DOI: https://doi.org/10.1007/11427995_50

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-25999-2

  • Online ISBN: 978-3-540-32063-0

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation