Abstract: The frequent explosion of massive worm propagation becomes a huge threaten to Internet security and caused countless losses. The traditional signature based IDS fails to detect new worm due the absence of the ability to detect characteristic of unknown wo

Key words: Unknown worm species, Automatic signature extraction, AOI