Research of Internet worm infection probability estimation based on comprehensive analysis of net-flow and packets
通过流量和数据包综合估计内网感染蠕虫概率的研究

This paper presented a method of analyzing the probability of Internet worm infection in internal network. Analyzed the packets through the switch in network by using the active of Internet worm, acquired the amount of abnormal packets, then analyzed the number of abnormal packets to get the abnormal packets rise rate by using AR model. Weighted the abnormal flow and abnormal packets rise rate in internal network, comprehensively estimated them and got the probability of Internet worm infection in internal network. The experiment results show that the method is effective and feasible.