Abletopropagatequicklyandchangetheirpayloadwitheachinfection,polymorphicwormshavebeenabletoevadeeventhemostadvancedintrusiondetectionsystems(IDS).And,becausezero-daywormsrequireonlysecondstolaunchfloodingattacksonyourservers,usingtraditionalmethodssuchasmanuallycreatingandstoringsignaturestodefendagainstthesethreatsisjusttooslow.
Bringingtogethercriticalknowledgeandresearchonthesubject,AutomaticDefenseAgainstZero-dayPolymorphicWormsinCommunicationNetworksdetailsanewapproachforgeneratingautomatedsignaturesforunknownpolymorphicworms.Itpresentsexperimentalresultsonanewmethodforpolymorphicwormdetectionandexaminesexperimentalimplementationofsignature-generationalgorithmsanddouble-honeynetsystems.Ifyouneedsomebackground,thebookincludesanoverviewofthefundamentaltermsandconceptsinnetworksecurity,includingthevarioussecuritymodels.Clearingupthemisconceptionsaboutthevalueofhoneypots,itexplainshowtheycanbeusefulinsecuringyournetworks,andidentifiesopen-sourcetoolsyoucanusetocreateyourownhoneypot.There'salsoachapterwithreferencestohelpfulreadingresourcesonautomatedsignaturegenerationsystems.Theauthorsdescribecutting-edgeattackdetectionapproachesanddetailnewalgorithmstohelpyougenerateyourownautomatedsignaturesforpolymorphicworms.Explaininghowtotestthequalityofyourgeneratedsignatures,thetextwillhelpyoudeveloptheunderstandingrequiredtoeffectivelyprotectyourcommunicationnetworks.Coverageincludesintrusiondetectionandpreventionsystems(IDPS),zero-daypolymorphicwormcollectionmethods,double-honeynetsystemconfigurations,andtheimplementationofdouble-honeynetarchitectures.