基于漏洞的蠕虫特征自动提取技术研究  

Research of automatic worm signature generation based on vulnerability

作　　者：李晓冬[1] 李毅超[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都610054

出　　处：《计算机应用》2008年第3期640-642,共3页journal of Computer Applications

摘　　要：提出一种新的基于漏洞的蠕虫特征,其区别于传统的基于语法或语义分析的技术,对蠕虫攻击的漏洞特征进行分析,将该算法应用于检测系统中。通过实验证明,该检测系统能有效地检测出各种多态变形蠕虫。A new worm signature based on vulnerability was proposed, which was different from traditional methods based on syntactic or semantic. It focused on vulnerability signature that did not change in worm attack. Finally, we applied this method to a detection system and it proved this system can efficiently detect various kinds of worms.

关 键 词：计算机网络 蠕虫 漏洞 特征提取 检测系统 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]