实时混合对抗蠕虫的建模和分析  

Modeling and Analysis of Real-time Hybrid Anti-worms

作　　者：秦拯[1] 李军群[1] 欧露[1] Alex X.Liu 

机构地区：[1]湖南大学软件学院,湖南长沙410082 [2]密歇根州立大学计算机科学与工程系,密歇根兰西488241266

出　　处：《湖南大学学报（自然科学版）》2011年第5期74-78,共5页Journal of Hunan University:Natural Sciences

基　　金：国家自然科学基金资助项目(61070194);国家发改委信息安全专项资助项目(发改办高技[2009]1886号文);湖南省自然基金项目资助(09JJ3124)

摘　　要：传统的防病毒技术难以抵御蠕虫的传播,为此本文提出实时混合对抗技术,该技术在被对抗蠕虫感染的主机与易感染主机数量相等时转换对抗策略,并建立实时混合对抗蠕虫的传播模型.最后,通过仿真实验从对抗有效性、资源消耗和应对突发事件能力三个方面验证实时混合对抗技术的性能.理论分析和实验结果表明,实时混合对抗技术能更好地满足对抗有效性和低资源消耗要求,并能应对突发事件.Owing to the difficulties of traditional anti-virus technologies against internet worms,more and more attention has been paid to anti-worm in the field of malicious code.Real-time hybrid confronting technology was presented to solve the shortcomings of the existing confronting technologies in confronting validity,resource consumption and the ability to handle accidents,which changes confronting tactic according to the radio of hosts infected by anti-worm to susceptible hosts.And the propagation model of real-time hybrid anti-worm was constructed.Finally,the performance of real-time hybrid confronting technology was validated by simulation experiments on confronting validity,resource consumption and ability to handle accidents.Analyses and experiments have indicated that real-time hybrid confronting technology is better than other technologies on confronting validity with low resource consumption,and can handle accidents.

关 键 词：网络安全 网络蠕虫 对抗蠕虫 传播模型 实时混合对抗技术 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]