Network Measurement with a Network Telescope

A decent tutorial on monitoring for worm activity comes from set of slides from Youngseok Lee at Chungnam National University, Korea, on measuring malicious network activity using a large scale monitor, also known as a network telescope. The presentation is entitled Measurement of Campus Network with Network Telescope, and the slides are in English (and in PDF form). Using a large-scale monitor, you can see DDoS backscatter and worm probes. A number of equations and examples are given, bringing together a number of resources.