@inproceedings{ccb7305a299b4a4e8f8ba217c6b7ed4d,
title = "Scanning worm detection with ARP anomaly in local area network",
abstract = "Local area network (LAN) is usually partitioned into multiple Virtual LANs (VLAN). A scanning worm targeting systems within its own VLAN exhibits anomalous behavior distinct from normal Address Resolution Protocol (ARP) activity. The paper proposes an anomaly-based detection technique based on the ARP activities of individual host to detect propagation of scanning worms. Our experiments indicate that this technique is both accurate and rapid to detect and contain the worm propagation in LAN.",
keywords = "Address Resolution Protocol (ARP), Anomaly detection, Scanning worm",
author = "Jianwei Sun and Junkai Yi",
year = "2006",
language = "English",
isbn = "9780889866157",
series = "Proceedings of the Fifth IASTED International Conference on Communications, Internet, and Information Technology, CIIT 2006",
pages = "155--159",
booktitle = "Proceedings of the Fifth IASTED International Conference on Communications, Internet, and Information Technology, CIIT 2006",
note = "5th IASTED International Conference on Communications, Internet, and Information Technology, CIIT 2006 ; Conference date: 29-11-2006 Through 01-12-2006",
}