基于动态检测隔离机制的网络蠕虫传播模型与分析  

Worm Propagation Modeling and Analysis Based on the Mechanism of Dynamic Quarantine

作　　者：武斌 杨寿保[1] 赵叶红[1] 王绍林[1] 

机构地区：[1]中国科学技术大学计算机科学系,安徽合肥230026

出　　处：《小型微型计算机系统》2007年第9期1543-1548,共6页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(60273041)资助;国家"八六三"计划(2002AA104560)资助

摘　　要：提出一种基于动态检测隔离机制的通用网络蠕虫传播模型,该模型定义了蠕虫在隔离阶段的可疑状态,显式地刻画了蠕虫动态检测隔离过程;并利用动态蠕虫感染率和动态主机移除率、主机自动免疫率分别描述了蠕虫传播造成的网络拥塞现象和人类在对抗蠕虫病毒过程中的主观能动性.分析表明,基于动态检测隔离机制系统可有效降低蠕虫传播速度,减少被感染主机数,延迟蠕虫传播峰值出现的时间.This paper proposes a universal worm propagating model based on the mechanism of dynamic quarantine. The model defines the dubious state when worm stays in the phase of quarantine and depicts the process of dynamic quarantine explicitly. It also depicts packet loss caused by congestion of some routers and the mankind＇s initiative in the course of antagonizing the worm, by utilizing dynamic infecting rate and together with dynamic removing and auto-immunized rate. The analysis shows that the system based on the mechanism of dynamic quarantine can slow down a worm＇s propagation, reduce the number of infected hosts and delay the time when the worms burst out to the peak value.

关 键 词：网络安全 蠕虫传播模型 动态检测隔离 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]