IPv6网络中DNS蠕虫的研究  

Research of DNS Worm in IPv6 Networks

作　　者：徐延贵[1,2] 钱焕延[1] 张凯[1] 

机构地区：[1]南京理工大学计算机科学与技术学院,南京210094 [2]沈阳炮兵学院自行火炮系,沈阳110162

出　　处：《计算机科学》2009年第12期32-36,共5页Computer Science

基　　金：国防科工委应用基础资金项目(JI300D004)资助

摘　　要：基于IPv6网络环境分析了网络蠕虫的扫描策略,构建了一种新型网络蠕虫——DNSWorm-V6,该蠕虫应用两层不同的扫描策略,即在本地应用子网内扫描策略,在子网间应用DNS扫描策略。由此两层扫描策略,提出一种双层蠕虫传播模型TLM。仿真实验结果表明,DNS Worm-V6是一种可以在IPv6网络中大范围快速传播的蠕虫。可以预测IPv6网络中新型蠕虫可能带来的威胁。In IPv6 network environment, the scanning strategy of Internet worm was analyzed. A new type of worm, DNSWorm-V6 was built. The worm applies two different layers scanning strategy. It means that the worm applies sub-net scanning strategy in local subnet and applies DNS scanning strategy in inter-suhnet. Based on the two layers scanning strategy, a Two-Level worm propagation model, TLM was presented. The results of simulation experiment show that DNSWorm-V6 is a worm that can propagate lastly in the large-scale in IPv6 network, at the same time we can predict the threat probably posed by the new worm in IPv6 network.

关 键 词：IPV6 网络蠕虫 DNS 蠕虫扫描策略 蠕虫传播模型 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]