Polymorphic worm detection using token-pair signatures

摘要: A worm is a self-replicating computer program which does not need neither to attach itself an existing nor require user intervention unlike viruses. Worms exploit operating system and application software vulnerabilities infect the systems. Polymorphic code art of developing that mutates at each copy while keeping original algorithm unchanged. By way, polymorphic changes its pattern time it sends another system. Thereby this avoids detection by simple signature matching techniques. On other hand, there still some part remains In work, we propose Token-Pair Conjunction Subsequence signatures for detecting threats. Experiments proposed model were performed using two real worms. Experiment results show schema have low false negatives positives.