New Method Traps 'Fast' Worms

Researchers at Penn State University have launched a startup to sell their new antivirus and antiworm technologies. The recently formed Day Zero Systems first plans to sell to antivirus companies the new technology it has developed for identifying and blocking worms.

The Proactive Worm Containment (PWC) approach developed by the researchers is supposed to augment traditional signature-based worm and virus detection, as well as so-called rate-limiting technology. The researchers have applied for a provisional patent for PWC, which uses anomaly detection, not signatures. It looks at packet rate, frequency of connections, and the diversity of connections, and it can find and detain a worm within milliseconds of a cyber attack. Dark Reading - Desktop Security - New Method Traps 'Fast' Worms - Security News Analysis

Linked by shanmuga Wednesday, 14th February 2007 9:12PM