Workaround for Welchia and Sasser Internet Worms in Kumamoto University

DOI Web Site 3 Citations
  • Yasuo Musashi
    Center for Multimedia and Information Technologies, Kumamoto University
  • Kenichi Sugitani
    Center for Multimedia and Information Technologies, Kumamoto University
  • Ryuichi Matsuba
    Center for Multimedia and Information Technologies, Kumamoto University
  • Toshiyuki Moriyama
    Department of Civil Engineering, Faculty of Engineering, Sojo University

Search this article

Abstract

<p>The syslog messages of the iplog-2.2.3 packet capture in the DNS servers in Ku mamoto University were statistically investigated when receiving abnormal TCP packets from PC terminals infected with internet worms like W32/Welchia and/or W32/Sasser.D worms. The interesting results are obtained: (1) Initially, the W32/Welchia worm-infected PC terminals for learners (920 PCs) considerably accelerates the total W32/Welchia infection. (2) We can suppress quickly the W32/Sasser.D infection in our university when filtering the access between total and the PC terminal's LAN segments. Therefore, infection of internet worm in the PC terminals for learners should be taken into consideration to suppress quickly the infection.</p>

Journal

Citations (3)*help

See more

Keywords

Details 詳細情報について

Report a problem

Back to top