Please download the dossier by clicking on the dossier button x
×

Heuristic detection and termination of fast spreading network worm attacks

  • US 20040083408A1
  • Filed: 10/24/2002
  • Published: 04/29/2004
  • Est. Priority Date: 10/24/2002
  • Status: Active Grant
First Claim
Patent Images

1. A computer-implemented method for detecting a worm infection on a set of sources coupled to a network, the method comprising the steps of:

  • observing a plurality of failed network connection attempts, each failed network connection attempt originating from one of the sources and directed to a destination network address; and

    responsive to a source'"'"'s failed network connection attempts during a period of time meeting at least one of a set of threshold criteria, declaring a presence of a worm.

View all claims
  • 2 Assignments
Timeline View
Assignment View
    ×
    ×