僵尸网络技术发展新趋势分析  

Analysis of Development Trends of Botnet Techniques

作　　者：张冰[1] 杜国琦 李静[1] 

机构地区：[1]国家计算机网络应急技术处理协调中心,北京100029 [2]国药控股北京华鸿有限公司,北京100061

出　　处：《电信科学》2011年第2期45-49,共5页Telecommunications Science

基　　金：国家"863"计划基金资助项目(No.2007AA010505)

摘　　要：近年来,僵尸网络不断发展,已经成为一项能够带来高额利益的地下黑色产业。本文提出僵尸网络控制者面临的主要挑战,以及其未来可能采取的应对这些挑战的方法。本文介绍了一些可能用来提高僵尸网络能力的方法,包括利用层次化的和可扩展的方式来构建僵尸程序、利用Metasploit等来快速构建攻击方法、利用Gnutella和Skype等系统构建P2P网络、利用数字签名进行认证等方法等,隐蔽的通信频道研究可用使僵尸网络更加可靠、易扩展,使僵尸网络更加难以被清除。Botnet was evolving continuously in recent years and has become an highly profitable underground black industry.In this paper,the main challenges faced by the botnet herder were discussed,as well as the methods they may employ to overcome these challenges.Some possible ways that can improve the botnet capabilities were introduced,including： the layered and extensible method to construct a botnet,metasploit-based quick attack method,P2P botnet employing gnutella and skype,and signature-based authentication,the hidden communication channel techniques can be used to make more reliable and extensible botnet,which made it more difficult to be cleared.

关 键 词：僵尸网络 网络安全 攻击 趋势 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]