Internet蠕虫的早期检测和响应机制  

Internet worm early detection and response mechanism

作　　者：魏达[1] 刘衍珩[1] 王健[1] 田大新[1] 许彦钊[1] 

机构地区：[1]吉林大学计算机科学与技术学院

出　　处：《吉林大学学报（工学版）》2007年第4期854-859,共6页Journal of Jilin University:Engineering and Technology Edition

基　　金：国家自然科学基金资助项目(60573128);公安部应用创新计划项目(2005YYCXJLST045)

摘　　要：针对Kalman滤波器在检测蠕虫时具有对检测时间间隔敏感的不足,基于流行病学蠕虫传播模型,提出了一种具有多个检测时间间隔的Kalman滤波器蠕虫早期检测方法和蠕虫响应机制。实验模拟表明:该检测方法和响应机制能达到有效减缓蠕虫大范围快速传播的目的。Fast spreading of worms has presented one of the majoi threats to the internet security and this tendency is increasingly fierce. To overcome the deficient sensitivity to time interval based on Kalman filter worm detection, a new worm early detection method and response mechanism were proposed. This early detection method is based on the epidemic worm propagation model and has multi-deferent intervals based on Kalman filter. Experiment simulation shows that the proposed detection method and response mechanism can effectively slow down the rapid propagation of internet worms in a large scope.

关 键 词：计算机系统结构 蠕虫 早期检测 KALMAN滤波器 蠕虫传播模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]