Jun Ho Choi, Pan Koo Kim

The KIPS Transactions:PartC, Vol. 8, No. 4, pp. 397-404, Aug. 2001
10.3745/KIPSTC.2001.8.4.397,   PDF Download:

Abstract

Many kinds of viruses have been occurring in the computer systems. These are able to destroy some critical data and even make the computer system halt their function. Consequently, its damage was enormous. So we need a more efficient method that detects the computer viruses, different from the existing one. Most of the existing method to cope with the viruses are to use anti-virus program that probes malicious code patterns and get rid of them from the infected file. This kind of program is usually launched on the Microsoft Windows system for users. And also, for the reason that anti-virus program in the Unix-like operating system scans the malicious code patterns into the infected files after storing them firstly in their file system, it seems that this can not actively deal with virus spreading. In this paper, we have designed and implemented a firewall system that diagnoses the incoming files through the network in real-time and then reports the results by the HTML file on the Web. This system can detect the incoming data over the network keeping the existing firewall security policies and function. As a result of experiment, we found that our proposed system has the 8% of processing time overhead when adding virus probing module to the established firewall system.

Statistics
Cite this article