Instruments and Systems: Monitoring, Control, and Diagnostics Annotation << Back Dynamic model of the detection system of network worms A.V. YAKOVLEV Y.Y. GROMOV P.A. SHCHERBININ A.M.SHUVAEVA The analyses of Intrusion Detection Systems, that allowed revealing the main functional requirements to modern information systems. Built subsystem of analysis and response intrusion detection system based on semantic networks and dynamic network models, with input in the form of signatures and output data in the form of alarm. Network models allowed producing either a static and dynamic analysis of the intrusion detection system on the example of network worms. The complete description of model is given, including descriptions of positions, transitions, initial markup network. Analyses of the properties of dynamic models suggest the possibility of significantly reducing the reaction time for attacking impact on the information system. The obtained simulation results on the basis of the program of Pipe 3.0 reflected in the work in the form of a tree of attainability, histograms and graphs and statistical indicators. Keywords: IDS Intrusion Detection System, network worms, Petri nets, tree of attainability, the signature of the attack. Contacts: E-mail: gromovtambov@yandex.ru Pp. 13-24.