蠕虫对抗蠕虫模型的分析与改进  

Analysis and Improvement of Worm-anti-worm Model

作　　者：彭俊好[1] 徐国爱[1] 朱振荣[1] 杨义先[1] 

机构地区：[1]北京邮电大学网络与交换技术国家重点实验室信息安全中心

出　　处：《计算机工程》2008年第15期135-137,共3页Computer Engineering

基　　金：高等学校博士学科点专项科研基金资助项目(20050013011)

摘　　要：指出蠕虫对抗蠕虫模型中存在的错误,通过分析蠕虫传播规律,提出修正模型。根据良性蠕虫的不同对抗策略,补充建立相应的蠕虫对抗蠕虫模型。通过数值模拟,分析良性蠕虫出现早晚及良性蠕虫的不同对抗策略对蠕虫传播控制的影响。结果表明,良性蠕虫引入越早,其查杀及修复漏洞功能就越全面,控制恶意蠕虫传播的效果也越好。This paper points out the error of worm-anti-worm model and provides the revising model based on the law of worm propagation. For the different policy of anti worm, supplementary model for different anti policies of anti worm is provided respectively. Through numerical simulation, the influence for worm control of anti worm appearance time and the anti polices is analyzed. Results show that, for anti worm, the sooner for introduction, and the more comprehensive for the function of killing worm and restoring vulnerability, the better for the control of malicious worm.

关 键 词：蠕虫 传播模型 蠕虫对抗蠕虫模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]