Detecting Early Worm Propagation Based on Entropy

In this paper, we present a router-based system to identify worm attacks by computing entropy values of selected packet attributes. We first compute during a training phase a profile of entropy values of the selected packet attributes. Then Chebyshev’s inequality is utilized after the training phase