SISG: self‐immune automated signature generation for polymorphic worms

摘要: Purpose – The purpose of this paper is to propose a self‐immune automated signature generation (SISG) for polymorphic worms which able work well, even while being attacked by any types malicious adversary and produces global‐suited signatures other than local‐suited its distributed architecture. Through experimentations, the method thereafter evaluated.Design/methodology/approach ideal worm exist in each copy corresponding worm, but never categories normal network traffic. SISG compares extract same components, then from components must achieve low‐false positive negative. immune most attacks filtering harmful noise made adversaries before generation.Findings NOP sled, body descriptor are not good be because they can confused intricately engines. Protocol frames may suit to...