Early Warning Technology Of Network Worm Virus In Campus Network Environment

With the development of computer technology and Internet,computer virus and worms have become the biggest trouble.The breaking out of worm affected the normal function of computer and network seriously.The transmission of worm not only occupies the system resources but also affects the normal operation,occupies the network bandwidth,making net traffic even network break down threatening the people's regular life and social stability. So the most important thing is detecting and controlling the worm in time for the security of network.The paper introduces the computer worm virus behavior characteristics, analyzed the current computer worm virus detection methods problems, such as false alarm, missing alarm and polymorphic worms. In this paper, the method of worm detection based on worm's behavior anlysis is proposed. The early warning technology of campus network worm virus is given, and the system module, and module function realization also presented. The realization of network data flow netflow through the comprehensive analysis, according to the results of the corresponding network warning.By applied in campus network of the Shandong transport vocational college, it shows this technology can make good performances in worm virus detection, and greatly improve the level of campus network management.