<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01518242</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-20T23:06:29+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Cyber Weather Forecasting: Forecasting Unknown Internet Worms Using Randomness Analysis</title>
            <author role="aut">
              <persName>
                <forename type="first">Hyundo</forename>
                <surname>Park</surname>
              </persName>
              <email type="md5">f6f6145593ab0b9e82c68d16cee881de</email>
              <email type="domain">korea.ac.kr</email>
              <idno type="idhal" notation="numeric">1007505</idno>
              <idno type="halauthorid" notation="string">1167137-1007505</idno>
              <affiliation ref="#struct-144144"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sung-Oh</forename>
                <forename type="middle">David</forename>
                <surname>Jung</surname>
              </persName>
              <email type="md5">4dc4b82c2ddef8ef7eecb737c3743333</email>
              <email type="domain">tiu.edu</email>
              <idno type="idhal" notation="numeric">1007506</idno>
              <idno type="halauthorid" notation="string">1167138-1007506</idno>
              <affiliation ref="#struct-494239"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Heejo</forename>
                <surname>Lee</surname>
              </persName>
              <email type="md5">5e67f17256f934d3ed5d3dce770693a8</email>
              <email type="domain">korea.ac.kr</email>
              <idno type="idhal" notation="numeric">989242</idno>
              <idno type="halauthorid" notation="string">1060761-989242</idno>
              <affiliation ref="#struct-466797"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Hoh</forename>
                <forename type="middle">Peter</forename>
                <surname>In</surname>
              </persName>
              <email type="md5">6ead6b797d5fdfdabb935af0982a88eb</email>
              <email type="domain">korea.ac.kr</email>
              <idno type="idhal" notation="numeric">1007507</idno>
              <idno type="halauthorid" notation="string">1167139-1007507</idno>
              <affiliation ref="#struct-466797"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-05-04 13:45:34</date>
              <date type="whenModified">2023-02-14 15:00:07</date>
              <date type="whenReleased">2017-05-04 14:53:53</date>
              <date type="whenProduced">2012-06-12</date>
              <date type="whenEndEmbargoed">2015-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01518242v1/document">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01518242v1/file/978-3-642-30436-1_31_Chapter.pdf" id="file-1518242-1579122">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-30436-1_31.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01518242</idno>
            <idno type="halUri">https://inria.hal.science/hal-01518242</idno>
            <idno type="halBibtex">park:hal-01518242</idno>
            <idno type="halRefHtml">&lt;i&gt;27th Information Security and Privacy Conference (SEC)&lt;/i&gt;, Jun 2012, Heraklion, Crete, Greece. pp.376-387, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-30436-1_31"&gt;&amp;#x27E8;10.1007/978-3-642-30436-1_31&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Crete, Greece. pp.376-387, &amp;#x27E8;10.1007/978-3-642-30436-1_31&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1518242-1579122"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-376" corresp="IFIP-AICT">Information Security and Privacy Research</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 10: Security and Trust Models</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Cyber Weather Forecasting: Forecasting Unknown Internet Worms Using Randomness Analysis</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Hyundo</forename>
                    <surname>Park</surname>
                  </persName>
                  <email type="md5">f6f6145593ab0b9e82c68d16cee881de</email>
                  <email type="domain">korea.ac.kr</email>
                  <idno type="idhal" notation="numeric">1007505</idno>
                  <idno type="halauthorid" notation="string">1167137-1007505</idno>
                  <affiliation ref="#struct-144144"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sung-Oh</forename>
                    <forename type="middle">David</forename>
                    <surname>Jung</surname>
                  </persName>
                  <email type="md5">4dc4b82c2ddef8ef7eecb737c3743333</email>
                  <email type="domain">tiu.edu</email>
                  <idno type="idhal" notation="numeric">1007506</idno>
                  <idno type="halauthorid" notation="string">1167138-1007506</idno>
                  <affiliation ref="#struct-494239"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Heejo</forename>
                    <surname>Lee</surname>
                  </persName>
                  <email type="md5">5e67f17256f934d3ed5d3dce770693a8</email>
                  <email type="domain">korea.ac.kr</email>
                  <idno type="idhal" notation="numeric">989242</idno>
                  <idno type="halauthorid" notation="string">1060761-989242</idno>
                  <affiliation ref="#struct-466797"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Hoh</forename>
                    <forename type="middle">Peter</forename>
                    <surname>In</surname>
                  </persName>
                  <email type="md5">6ead6b797d5fdfdabb935af0982a88eb</email>
                  <email type="domain">korea.ac.kr</email>
                  <idno type="idhal" notation="numeric">1007507</idno>
                  <idno type="halauthorid" notation="string">1167139-1007507</idno>
                  <affiliation ref="#struct-466797"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>27th Information Security and Privacy Conference (SEC)</title>
                  <date type="start">2012-06-12</date>
                  <date type="end">2012-06-06</date>
                  <settlement>Heraklion, Crete</settlement>
                  <country key="GR">Greece</country>
                </meeting>
                <editor>Dimitris Gritzalis</editor>
                <editor>Steven Furnell</editor>
                <editor>Marianthi Theoharidou</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Information Security and Privacy Research</biblScope>
                  <biblScope unit="volume">AICT-376</biblScope>
                  <biblScope unit="pp">376-387</biblScope>
                  <date type="datePub">2012</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-30436-1_31</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Reliability check</term>
                <term xml:lang="en">Regression analysis</term>
                <term xml:lang="en">Randomness check</term>
                <term xml:lang="en">Internet worm</term>
                <term xml:lang="en">Forecasting</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Since early responses are crucial to reduce the damage from unknown Internet attacks, our first consideration while developing a defense mechanism can be on time efficiency and observing (and predicting) the change of network statuses, even at the sacrifice of accuracy. In the recent security field, it is an earnest desire that a new mechanism to predict unknown future Internet attacks needs to be developed. This motivates us to study forecasting toward future Internet atacks, which is referred to as CWF (Cyber Weather Forecasting). In this paper, in order to show that the principle of CWF can be realized in the real-world, we propose a forecasting mechanism called FORE (FOrecasting using REgression analysis) through the real-time analysis of the randomness in the network traffic. FORE responds against unknown worms 1.8 times faster than the early detection mechanism, named ADUR (Anomaly Detection Using Randomness check), that can detect the worm when only one percent of total number of vulnerable hosts are infected. Furthermore, FORE can give us timely information about the process of the change of the current network situation. Evaluation results demonstrate the prediction efficiency of the proposed mechanism, including the ability to predict worm behaviors starting from 0.03 percent infection. To our best knowledge, this is the first study to achieve the prediction of future Internet attacks.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-144144" status="INCOMING">
          <orgName>Korea University</orgName>
          <desc>
            <address>
              <country key="KR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-466797" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-494239" status="VALID">
          <idno type="ROR">https://ror.org/0251ehn88</idno>
          <orgName>Trinity International University</orgName>
          <date type="start">2017-05-04</date>
          <desc>
            <address>
              <addrLine>2065 Half Day Road, Village of Bannockburn, Deerfield, IL 60015</addrLine>
              <country key="US"/>
            </address>
            <ref type="url">https://www.tiu.edu/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-466797" status="VALID">
          <idno type="ROR">https://ror.org/047dqcg40</idno>
          <orgName>Korea University [Seoul]</orgName>
          <date type="start">2016-09-27</date>
          <desc>
            <address>
              <addrLine>145 Anam-ro, Seongbuk-gu, Seoul, South Korea</addrLine>
              <country key="KR"/>
            </address>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>