2026-10-13T09:32:00Zhttps://iris.cnr.it/oai/request

oai:iris.cnr.it:20.500.14243/4462024-12-03T03:02:56Zcom_20.500.14243_54com_20.500.14243_21col_20.500.14243_65

Worm Poacher MAiello GPapaleo D Chiarella Maiello, Gpapaleo, Chiarella, D We propose a new technique to detect internet worm. We base our research on the fact that an indirect worm (a worm spreading by e-mail) needs to spread quickly and so it sends a lot of e-mail in a short while, producing an anomalous behaviour. Moreover we found stealthy worms through detecting traffic anomalies. We worked on a mail-server log of a real network and the results obtained drove us to detect indirect worm with different approaches based on various parameters (global e- mail flow, single host e-mail flow, reject, sender field analysis). 2007 info:eu-repo/semantics/other https://hdl.handle.net/20.500.14243/446 ita eng