Early Detection And Active Containment Of Network Worm

Following the application of the network technology, more and more network attacking activities will be appeared. In future, the network worm will be the most destructive attack in all of the security events. Particularly, the difficulties about hacking technology and coding the worms have been so largely brown down that the number of the network worm will be increasing in shorter time. If we won't develop the techniques to detect and defend the worms, they will threaten the future development of the Internet. So, the early detection and active containment of the network worm will be the hot field and future trend of the research in network security. This paper mainly includes the following section:1 Differentiate the conceptions of the worm and virus.2 Introduce the worm's propagation strategies and models.3 Describe the recently proposed worm detection strategies4 Propose the new feasible worm detection strategy named EWD (early worm detection) and simulate the related worm propagation under various network backgrounds.5 Describe the different worm containment strategies and simulate worm propagation effectiveness under worm containment using SSFNet.At the end, the future direction to the worm research has been pointed out.