A Modified Two-phase Knowledge Acquisition Algorithm to Construct Worm Knowledge Base

doi:10.4156/aiss.vol3.issue3.17

淡江大學機構典藏 > 工學院 > 資訊工程學系暨研究所 > 期刊論文 > Item 987654321/89143

jsp.display-item.identifier=請使用永久網址來引用或連結此文件: https://tkuir.lib.tku.edu.tw/dspace/handle/987654321/89143

题名:	A Modified Two-phase Knowledge Acquisition Algorithm to Construct Worm Knowledge Base
作者:	Lin, Shun-Chieh;Tung, Chun-Ho;Chiang, Ding-An;Chang, Chung-I
贡献者:	淡江大學資訊工程學系
关键词:	Computer Worm;Knowledge Acquisition;Knowledge Base;Security
日期:	2011-04
上传时间:	2013-05-22 10:40:47 (UTC+8)
出版者:	Gyeongju-si: Advanced Institute of Convergence I T
摘要:	With the rapid development of Internet, the worm can spread and infect other computers quickly. Lots of variants are evolved too fast to hardly detect them before crafting the specific signatures in most anti-virus software and hardware. Since most of worm technological documents are nonstructured, the discovery of knowledge by data mining is becoming not easy. In this paper, we modify two-phase knowledge acquisition via adding Hierarchical Grids Relation Adjustment algorithm to adjust hierarchical worm knowledge hierarchy. We propose sibling, parent-child, and ancestordescendent relations to guide experts to easily extract the conflict relations in each level of grid. Through the updated grid hierarchy, more exact and efficient worm distinguish rules can be obtained for understanding the worm hierarchy. Also, a worm immune system is implemented here to help users diagnose their vulnerable systems and teach users how to defend threat of worms. Moreover, the system can learn the signatures of variant worms by interacting with experts to easily incremental learn the knowledge of variant worms.
關聯:	Advances in Information Sciences and Service Sciences 3(3), pp.136-146
DOI:	10.4156/aiss.vol3.issue3.17
显示于类别:	[資訊工程學系暨研究所] 期刊論文

文件中的档案:

档案	描述	大小	格式	浏览次数
index.html		0Kb	HTML	306	检视/开启

在機構典藏中所有的数据项都受到原著作权保护.

TAIR相关文章

数据加载中.....