Conficker蠕虫传播模型  

Propagation Model for Conficker Worm

作　　者：李润恒[1] 王明华[2] 贾焰[1] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073 [2]国家计算机网络应急技术处理协调中心,北京100029

出　　处：《数学的实践与认识》2010年第12期89-97,共9页Mathematics in Practice and Theory

基　　金：国家高技术研究发展计划(863计划)(2007AA010502;2007AA01Z474;2006AA01Z451)

摘　　要："飞客"(conficker)蠕虫病毒是近期在全球爆发的以微软的windows操作系统为攻击目标的计算机蠕虫病毒,从爆发至今,感染数量巨大,形成了巨大规模的僵尸网络,对互联网安全形成了巨大的威胁.采用域名重定向技术监测conficker蠕虫的扩散传播,针对其查杀率低,传播周期长的特点,考虑地域、连通性等因素所导致的感染主机传播能力的差异,建立conficker蠕虫传播模型,最后通过真实的conficker蠕虫监测数据验证了模型的有效性.Conficker is a worm outbreak recently and attack Microsoft＇s windows operating system.So far, it has infected a large number of computers, which form a large botnet and became a huge threat to the security of the internet.In this paper, the redirect technology of domain name is used to monitor the conficker worm.For it＇s low killing rate and longterm period of propagation, we build a propagation model for conficker worm which take into account the geography, connectivity and other factors cause difference in propagation capacity of computer, and finally verify the validity of the model with the real monitoring data.

关 键 词：conficker 蠕虫 僵尸网络 传播 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]