SELF-PROPAGATING PROGRAM DETECTOR APPARATUS, METHOD, SIGNALS AND MEDIUM

摘要

A method, apparatus, signals and medium for detecting self propagation of a self-propagating program involves producing difference values, each difference value representing a difference between volume of data traffic transmitted in a transmit direction and volume of data traffic received in a receive direction, in successive periods of time, incrementing an anomaly event counter when one of the difference values satisfies a difference criterion and setting an indicator active when the anomaly event counter reaches a value that meets a count criterion.