Detecting Zero-day Polymorphic Worm: A Review

Sulieman, Sulieman Mohamed Ali; Fadlalla, Yahia A.

doi:10.1109/ncg.2018.8593085

Cited by 6 publications

(5 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They have been extensively studied and found posing the most damaging threats to IoT and its applications. 5 Polymorphic worms can easily evade detection through changing their appearance, such as altering their byte sequence or varying their payload via compression, encryption, among other methods required no human intervention. 6 Replicating themselves to appear differently in each infection makes polymorphic worms survive longer in a network.…”

Section: Introductionmentioning

confidence: 99%

“…Fast detection and prevention against polymorphic worms have become more imperative. 5,7,8 Researchers have been working hard to develop defensive methods against them, for example, signature-based detection, statistical-based detection, behavior-based detection, and for forth. Generating reliable signatures to detect polymorphic worms is one of such means.…”

Section: Introductionmentioning

confidence: 99%

“…Polymorphic worms are the height of sophistication in computer malware. They have been extensively studied and found posing the most damaging threats to IoT and its applications 5 . Polymorphic worms can easily evade detection through changing their appearance, such as altering their byte sequence or varying their payload via compression, encryption, among other methods required no human intervention 6 .…”

Section: Introductionmentioning

confidence: 99%

“…As polymorphic worms posing greater threats to the Internet infrastructures, the need for Internet service providers to secure their assets and protect their customers is growing. Fast detection and prevention against polymorphic worms have become more imperative 5,7,8 …”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Toward machine intelligence that learns to fingerprint polymorphic worms in IoT

Wang

Yang

Wang

et al. 2022

Int J of Intelligent Sys

View full text Add to dashboard Cite

Internet of Things (IoT) is fast growing. Non-personal computer devices under the umbrella of IoT have been increasingly applied in various fields and will soon account for a significant share of total Internet traffic. However, the security and privacy of IoT and its devices have been challenged by malware, particularly polymorphic worms that rapidly selfpropagate once being launched and vary their appearance over each infection to escape from the detection of signature-based intrusion detection systems. It is well recognized that polymorphic worms are one of the most intrusive threats to IoT security.To build an effective, strong defense for IoT networks against polymorphic worms, this study proposes a machine intelligent system, termed Gram-Restricted Boltzmann Machine (Gram-RBM), which automatically generates generic fingerprints/signatures for the polymorphic worm. Two augmented N-gram-based methods are designed and applied in the derivation of polymorphic worm sequences, also known as fingerprints/signatures. These derived sequences are then optimized using the Gaussian-Bernoulli RBM dimension-reduction algorithm. The results, gained

show abstract

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Toward machine intelligence that learns to fingerprint polymorphic worms in IoT

Wang

Yang

Wang

et al. 2022

Int J of Intelligent Sys

View full text Add to dashboard Cite

show abstract

“…Research indicates that for every breakthrough in security, a new lope hole or zero day is created and this is not attended by the media. Zero-Day have a form of impacting organizations and people in general, after a large time of activity incognito [5]. It is throughout research and investigation that recurs to techniques such as forensics and threat analysis, that societies can anticipate the impact of a zero-day vulnerability, towards a more secure use of technology [6].…”

Section: Introductionmentioning

confidence: 99%

Editorial of ARIS2 - Advanced Research on Information Systems Security, an International Journal

Mateus-Coelho¹

2021

ARIS2-Journal

View full text Add to dashboard Cite

Securing information, actors, and their systems have become a paramount challenge in recent years. In the first regular issue of 2021 of the ARIS2 - Advanced Research on Information Systems Security, an International Journal, in four of the five articles, problems of information security are addressed with a practical and theoretical view, with origin in academic centers and research from masters and doctoral students.

show abstract