网络蠕虫扫描策略和检测技术的研究  

Research of Internet Worm Scanning Strategies and Detection Technologies

作　　者：亓璐[1] 吴海峰[1] 翟鹏[1] 徐祥涛[1] 

机构地区：[1]济宁学院,山东济宁273155

出　　处：《计算机安全》2010年第5期11-13,共3页Network & Computer Security

摘　　要：随着网络蠕虫的出现,网络的安全性受到极大挑战,许多重要数据遭到破坏和丢失,造成社会财富的巨大浪费,因此,研究网络蠕虫的传播行为和防御策略非常重要。重点研究了网络蠕虫工作机制中的蠕虫扫描和蠕虫检测,介绍了多种扫描策略和检测方法,并给出了各自的优点和不足。随着网络蠕虫复杂性的增加,多态蠕虫已成为新的研究方向。With internet worms appeared,the network security gives a great challenge,for example,many important data are lost,and social wealth is wasted.So it is significant to study worm propagation and defense strategies.In this paper,the key to study is worm scanning and worm detection of worm execute mechanism.This paper introduces plenty of scanning strategies and detection technologies,and gives their advantages and shortcomings respectively.With the explosive growth of internet worm complexity,polymorphic worms have become new research trends.

关 键 词：网络蠕虫 扫描策略 蠕虫检测 蜜罐 多态蠕虫 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]