Abstract: The frequent explosion of massive worm propagation becomes a huge threaten to Internet security and caused countless losses, but endless novel worm species come one after another. Currently, worm monitoring and response are hysteretic and mainly operated

Key words: Worm spreading, Worm source tracing algorithm, 2-page hash algorithm