Embedded Systems-based Worm Detection

Worms is an independent program which can running without any users. It can take other computers partly or whole control access by scan the leaks of them. Worms is differ from tradition virus, it attacks computer networks and carried by computers. During leak scanning, worms will bring huge payload and lead to inability of the whole network.Embedded system is one kind of special computer system which is low cost, high reliability, small dimension. The issue introduced one kind of method to detect worms with embedded system.The issue introduced WS310 experiment board, which produced by winsilicon Beijing corp. with Samsung's s3c4510b CPU. And the procedures of the cross compile setting and application development. The issue also introduced packet capture model and BPF model and Libpcap function and our code of packet capture. Then the issue introduced protocol analysis and the detail of TCP/IP analysis and the code.After comparing detection known and unknown worms, the issue brings forward an embedded system based (which is low cost and small dimension) worms detection, which called synthesis analysis. And the issue gives the detail and code and its primary experiment result. At last, we discuss its applications and development.