基于信息关联的P2P蠕虫检测方法  

P2P Worm Detection Method Based on Information Correlation

作　　者：张静[1] 胡华平[1,2] 肖枫涛[1] 刘波[1] 

机构地区：[1]国防科技大学计算机学院,长沙410073 [2]福建师范大学网络安全与密码技术重点实验室,福州350007

出　　处：《计算机工程》2008年第21期115-117,135,共4页Computer Engineering

基　　金：国家自然科学基金资助项目(60573136);福建省高校重点实验室开放课题基金资助项目“网络安全与密码技术”(07A004)

摘　　要：P2P蠕虫对P2P网络和Internet构成巨大安全威胁。该文根据P2P网络报文之间的关系,提出一种P2P蠕虫检测方法,通过建立过滤规则实现对P2P蠕虫的检测与抑制。模拟实验结果表明,该方法对P2P蠕虫传播的抑制效果与资源分布存在较大联系,其检测效果良好。P2P worm has become a severe threat to the P2P network and Internet. This paper presents a P2P worm detection method according to the relations between the messages in P2P network, and establishes a series of filter rules to realize the detection and containment for P2P worm. Simulation experimental results show that the distribution of resources has a great influence on the effect of containment for P2P worm propagation in this method and this method has a good effect on P2P worm detection.

关 键 词：P2P蠕虫 传播 检测 抑制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]