{"id":"https://openalex.org/W2063208365","doi":"https://doi.org/10.1109/cns.2014.6997486","title":"Detecting smart, self-propagating Internet worms","display_name":"Detecting smart, self-propagating Internet worms","publication_year":2014,"publication_date":"2014-10-01","ids":{"openalex":"https://openalex.org/W2063208365","doi":"https://doi.org/10.1109/cns.2014.6997486","mag":"2063208365"},"language":"en","primary_location":{"id":"doi:10.1109/cns.2014.6997486","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2014.6997486","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 IEEE Conference on Communications and Network Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100691319","display_name":"Jun Li","orcid":"https://orcid.org/0000-0002-6239-2922"},"institutions":[{"id":"https://openalex.org/I181233156","display_name":"University of Oregon","ror":"https://ror.org/0293rh119","country_code":"US","type":"education","lineage":["https://openalex.org/I181233156"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jun Li","raw_affiliation_strings":["Network & Security Research Laboratory, University of Oregon","Network & Security Research Laboratory, University of Oregon, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Network & Security Research Laboratory, University of Oregon","institution_ids":["https://openalex.org/I181233156"]},{"raw_affiliation_string":"Network & Security Research Laboratory, University of Oregon, USA","institution_ids":["https://openalex.org/I181233156"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002864027","display_name":"Shad Stafford","orcid":null},"institutions":[{"id":"https://openalex.org/I181233156","display_name":"University of Oregon","ror":"https://ror.org/0293rh119","country_code":"US","type":"education","lineage":["https://openalex.org/I181233156"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shad Stafford","raw_affiliation_strings":["Network & Security Research Laboratory, University of Oregon","Network & Security Research Laboratory, University of Oregon, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Network & Security Research Laboratory, University of Oregon","institution_ids":["https://openalex.org/I181233156"]},{"raw_affiliation_string":"Network & Security Research Laboratory, University of Oregon, USA","institution_ids":["https://openalex.org/I181233156"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7198,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.76016025,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"193","last_page":"201"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sword","display_name":"SWORD","score":0.8748091459274292},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6994175910949707},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6281777620315552},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.5983241200447083},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.5686256289482117},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5487644076347351},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.16361385583877563},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.15313637256622314}],"concepts":[{"id":"https://openalex.org/C2781424646","wikidata":"https://www.wikidata.org/wiki/Q7395200","display_name":"SWORD","level":2,"score":0.8748091459274292},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6994175910949707},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6281777620315552},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.5983241200447083},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.5686256289482117},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5487644076347351},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.16361385583877563},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.15313637256622314},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns.2014.6997486","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2014.6997486","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 IEEE Conference on Communications and Network Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W88694106","https://openalex.org/W1498585374","https://openalex.org/W1527422375","https://openalex.org/W1551618785","https://openalex.org/W1586871184","https://openalex.org/W1594536929","https://openalex.org/W1597305440","https://openalex.org/W1913575206","https://openalex.org/W2100198871","https://openalex.org/W2102970979","https://openalex.org/W2104966990","https://openalex.org/W2105014180","https://openalex.org/W2105140491","https://openalex.org/W2117520528","https://openalex.org/W2133580356","https://openalex.org/W2151996777","https://openalex.org/W2276455333","https://openalex.org/W2310815985","https://openalex.org/W6603729080","https://openalex.org/W6633024543","https://openalex.org/W6634996908","https://openalex.org/W6635716266","https://openalex.org/W6675416627","https://openalex.org/W6679831375"],"related_works":["https://openalex.org/W4388437661","https://openalex.org/W3144335818","https://openalex.org/W2798475058","https://openalex.org/W4255153174","https://openalex.org/W2807752174","https://openalex.org/W4248271783","https://openalex.org/W4254099759","https://openalex.org/W606096353","https://openalex.org/W2808320746","https://openalex.org/W1623292280"],"abstract_inverted_index":{"Self-propagating":[0],"worms":[1,66,68,81],"can":[2,93],"infect":[3],"millions":[4],"of":[5,23,75,107,123],"computers":[6],"on":[7],"the":[8,27,73,84],"Internet":[9],"in":[10,45,87],"just":[11],"several":[12],"minutes.":[13],"Although":[14],"there":[15],"are":[16],"already":[17],"many":[18],"existing":[19,132],"worm":[20,30,43,50,76,85,110],"detectors,":[21],"none":[22],"them":[24,33],"systematically":[25],"consider":[26],"countermeasures":[28],"from":[29],"authors,":[31],"leaving":[32],"potentially":[34],"ineffective":[35],"against":[36],"smart,":[37],"evasive":[38,80,139],"worms.":[39,140],"We":[40,48,103],"therefore":[41],"revisit":[42],"detection":[44,51],"this":[46],"paper.":[47],"treat":[49],"as":[52],"an":[53],"arms":[54],"race,":[55],"and":[56,92,125,138],"study":[57],"how":[58],"to":[59,131],"most":[60],"effectively":[61],"detect":[62],"not":[63,71],"only":[64],"classic":[65,137],"(i.e.":[67],"that":[69,82,127],"do":[70],"have":[72],"knowledge":[74],"detectors),":[77],"but":[78],"also":[79],"know":[83,89],"detector":[86,111],"place,":[88],"its":[90],"configurations,":[91],"even":[94],"adjust":[95],"their":[96],"scanning":[97],"rate":[98],"by":[99],"observing":[100],"legitimate":[101],"traffic.":[102],"describe":[104],"our":[105],"design":[106],"a":[108],"new":[109],"called":[112],"SWORD,":[113],"conduct":[114],"extensive":[115],"experiments":[116],"using":[117],"realistic":[118],"trace":[119],"with":[120],"different":[121],"parameters":[122],"worms,":[124],"demonstrate":[126],"SWORD":[128],"is":[129],"superior":[130],"detectors":[133],"for":[134],"detecting":[135],"both":[136]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2016,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}