WORM DETECTION COOPERATIVE APPROACH

Early detection for internet worm can have a critical effect on slowing down its propagation. In this paper we propose four cooperative methods in an approach for worm detection based on nodes information exchange to detect worm behavioral signature. The difference between the four methods is on deciding the best nodes to cooperate with. The target is to achieve to achieve zero day worms in addition to detecting the well known worms. The results show that the approach can detect worm propagation in an infection rate less than 0.051 % of vulnerable nodes.