In order to prevent the huge damage caused by computer worms,an innovative approach using support vector machine(SVM) classifier for detecting unknown computer worm based on the measurement of computer performance was proposed to alarm Internet users.

The threats caused by IM worms were analyzed,the solutions in existing applications and studies were analyzed and their strong points were made use of.

Based on the traditional theory of IDS,the system entropy is studied,which come from statistics model,combining the worm behaviors characteristic the exponent entropy conception is put forward,a new inhibiting method is proposed from the anomaly detection point of view.

This paper, based on analysis of distributed abnormal traffic sequence propagation, presents a new algorithm for detecting the Internet worm infection, and explores the forecast mechanism for worm traffic.

Research on worm virus flow in LAN

In light of the characteristics of the LAN in Laiwu Steel Group,based on a brief analysis of the characteristics of worm virus,its spreading approaches and outbreak features,this paper puts forward safeguarding measures against worm virus off enterprise LAN.