Thursday June 29th, 14:00
Billy Goat is a worm detection system widely deployed throughout IBM and several other corporate networks. We describe the tools and constructions that we have used in the implementation and deployments of the system, and discuss contributions which could be useful in the implementation of other similar systems. We also discuss the features and requirements of worm detection systems in general, and how they are addressed by Billy Goat, allowing it to perform reliably in terms of scalability, accuracy, resilience and rapidity in detection and identification of worms without false positives.
Authors & presenters
Diego Zamboni (IBM MSS IBM Zurich Reserch Laboratory, CH)
James Riordan (IBM MSS IBM Zurich Reserch Laboratory, CH)
Yann Duponchel (IBM MSS IBM Zurich Reserch Laboratory, CH)