网络蠕虫检测系统的设计和实现  

Design and Application of Network Worm Detection System

作　　者：钱旭[1] 顾巍[1] 陈凌晖[1] 丁晓峰[1] 

机构地区：[1]北京文献服务处,北京100036

出　　处：《现代图书情报技术》2007年第1期44-48,共5页New Technology of Library and Information Service

摘　　要：设计一种面向实际应用的网络蠕虫检测系统,并初步实现原型系统。该系统采用分布式架构,主要针对局域网内的未知蠕虫进行实时监控,通过分析网络数据流量,提取蠕虫传播过程中的普遍特征,预测未知蠕虫在网内大规模爆发的趋势。该蠕虫检测系统可作为网络安全体系的重要组成部分,保障本地网络系统的稳定、安全运行。The application system for network worm detecting is designed, as well the prototype is constructed. The distributed structure is adopted to monitor the unknown worms at real - time, analyse the network stream, bring up the signature of worm spreading to identify that the unknown worms erupt in local network. The worm detection system could be applied as a significant aspect of network security architecture to secure the local network system.

关 键 词：网络蠕虫 分布式架构 异常检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]