From experiments, our models can classify and detect known worms and unknown worms with high detection rates without feature extraction and without using some fixed ports from K-L divergence. The results from cases 1 & 2 are shown in tables 5 and 6, where the detection rates of all models are over 98%. Table 7 presents the detection results with unknown worms that we consider in case 3, showing that our algorithms can detect unknown worms with overall detection rate over 91%. In particular, the Decision tree can detect unknown worms with the averaged detection rate over 97%, while the Bayesian network and Random forest have average detection rates from all experiments over 96% and 80%, respectively.