A Dependable Worm Signature Generation System Based on Threshold Signature
Jing Ji · Chinese Journal of Computers · 2009
Worm Signature Generation System(WSGS)is a new sort of security systems that generate and disseminate worm signatures by deploying many monitors at different sites of the Internet.The signatures can be used by firewalls or content filters to contain the spread of worms.While it is a promising technology to combat with Internet worms,WSGS has some serious security problems.When one or a few system components are compromised and controlled by attackers,they may conceal,modify or forge worm signatures,thus make the signatures generated by WSGS undependable.Motivated by the security challenges of existing systems,this paper presents a dependable WSGS based on threshold signature technology,which generates verifiable worm signatures through digital signature,so that any parties receive the signatures can verify their correctness.Furthermore,to avoid single point of failure and provide highly attack resilient,it applied an improved two-tier threshold signature scheme to generate digital signatures.Security analysis shows that the system can tolerant various attacks to a few components.