双层架构的P2P Botnet研究  

Analysis of P2P Botnet of two-tier structure

作　　者：方圆[1] 吴灏[1] 杨利明[1] 

机构地区：[1]解放军信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机工程与设计》2008年第11期2724-2726,2747,共4页Computer Engineering and Design

摘　　要：Botnet(僵尸网络)是由bot(僵尸主机)组成的可通信、可被攻击者控制的网络,而P2P botnet是一种利用P2P技术构建控制信道的僵尸网络。对比于以往具有明显追踪特征的P2P botnet而言,一种基于双层架构的P2Pbotnet在控制感染主机方面采用了更加隐蔽和灵活的方式,使追踪难度增大。通过模拟实验对基于这种通信控制模型的僵尸网络进行了功能和性能方面的研究,并提出了相应的防御与追踪方案。A collection of bots connected to a network which is controlled by attackers is called a Botnet, P2P botnets are bots that use P2P technology to accomplish certain tasks, The two-tier structure P2P botnet is more hidden and flexible in controlling infected host, while the existing P2P botnets only have obvious tracking features. Its functions and performance are critically studied both from experiments and theoretical analysis, In addition, the corresponding defense and tracking schemes are given.

关 键 词：僵尸网络 双层架构 感染 再感染 防御策略 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]