基于SSFNet的蠕虫传播细粒度建模与仿真  

Fine-granular Simulation and Modeling of Worm Propagation Using SSFNet

作　　者：邓洁[1] 段海新[1] 

机构地区：[1]清华大学信息网络工程研究中心,北京100084

出　　处：《小型微型计算机系统》2008年第1期145-149,共5页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(90412010)资助;国家"九七三"项目(2003CB314805)资助

摘　　要：流行病模型由于未考虑网络的各种因素,保真度较低.混合级建模能够对部分子网进行包级别的建模,但对蠕虫行为仍采用宏观建模,难以表现蠕虫本身的流量及其与背景流量间的互作用.针对现有方法的缺陷,本次研究设计并实现了保真度更高的基于SSFNet的蠕虫传播细粒度建模与仿真方法.该方法对蠕虫的主要功能模块进行了细节建模,能够反映网络拓扑、背景流量,以及扫描策略等因素,既有效地模拟了蠕虫在一定拓扑中的扩散,又能体现蠕虫传播给网络带来的影响.Epidemie model is a general way of modeling worms, but it ean not be satisfied on its poor fidelity, espeeially in the inability of modeling variety of network seenarios, sueh as rieh network topologies and baekground traffie. The mixed abstraetion level simulation is superior to epidemie model on the paeket-level modeling of eoneerned network. However, it is still ineapable of modeling worm traffic and the interaction between worms and background traffic. In this research, we design an approach of fine-granular modeling and simulation of worm propagation using SSFNet with higher fidelity than the two methods before, and carry it into execution. This model can not only model worm behaviors in propagation on the packet-level effectively, but also reflect the variance of background traffic and analyze the spread of worm under realistic environment which involves topologic layout, packet loss of routers, and variant scan strategies.

关 键 词：流行病模型 混合级建模 包级别建模 SSFNET 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]