Efficient Method for Detecting Worm Virus based Bloom- like Connection Behavior

The effort required for detecting worm viruses, that threaten the reliability and stability of network resources, is in the process of advancing, demanding increasingly sophisticated resources. Pattern-based worm virus detection systems use detection methods, which focus on pattern analysis for specific worm viruses. In the event of a different attack method, or a new attack occurs, current systems suffer from the problem of being unable to detect the worm virus quickly. This paper proposes a worm virus detection system that focuses on a common feature of worm viruses, which attempt many connections in a scanning process. The central contribution of the proposed system is to decrease the response time of an attack.