基于卡尔曼滤波的蠕虫检测方法  

Approach for Early Detecting Internet Worm Based on Kalman Filtering

作　　者：邓妍[1] 戴冠中[1] 慕德俊[1] 刘思伟[1] 

机构地区：[1]西北工业大学自动化学院,西安710072

出　　处：《计算机科学》2009年第4期94-96,共3页Computer Science

基　　金：国家教育部博士点基金项目(20020699026)资助

摘　　要：蠕虫对Internet安全构成了严重威胁,检测和防范蠕虫成为网络安全的研究课题。提出了一种基于卡尔曼滤波的蠕虫检测方法,建立适当的数学模型,给出相应的滤波方程,最后进行仿真分析。该方法可以利用实时量测信息不断地修正估计值。仿真结果表明,采用卡尔曼滤波能够快速有效地检测出蠕虫的爆发。Internet worm has severely threatened Internet security. To detect and defense the Internet worm becomes an important research topic in the field of network security. The estimator of worm infecting rate was proposed based on the Kalman filtering. The mathematical model was established and the corresponding filter equations were given. The advantage of the method is that the estimate value can be revised constantly. Simulation results show the estimator based on the Kalman filtering is effective and reliable in detecting the Internet worm.

关 键 词：网络安全 蠕虫感染率 卡尔曼滤波 估计 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]