A security framework for blocking new types of Internet worms in ubiquitous computing environments

Abstract

In ubiquitous computing environments, many of services may communicate valuable data with each other through networking based on Internet. So, a service of ubiquitous computing environments has to be invulnerable to any type of Internet worms or attacks. Internet worms can compromise vulnerable servers in a short period of time. The security systems using signatures cannot protect servers from new types of Internet worms. In this paper, we propose a security framework for blocking new types of Internet worms, using the Snort and Honeytrap. Honeytrap are installed on every client, which detects Internet worm attacks. All interactions with Honeytrap are regarded as attacks because it is installed to lure Internet worms. In the proposed framework, when Honeytraps detect Internet worm attacks, Snort blocks the attacks. © 2012 Springer-Verlag.