混合的结构化良性蠕虫对抗蠕虫过程的建模与分析  

Modeling and Analysis of Hybrid Structured Benign Worms Countering Against Worms

作　　者：周翰逊 郭薇[2] 王妍[1] 贾大宇[2] 

机构地区：[1]辽宁大学信息科学与技术学院,沈阳110136 [2]东北大学信息科学与工程学院,沈阳110819

出　　处：《小型微型计算机系统》2012年第2期376-379,共4页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(60803131)资助;辽宁省自然科学基金项目(20102083)资助;中国博士后科学基金面上项目(20100471474)资助

摘　　要：由于良性蠕虫可以主动免疫主机,因此使用良性蠕虫来对抗蠕虫传播正成为一种新的应急响应技术.提出了混合的结构化良性蠕虫,设计了它的工作机制以及部署情况.基于传染病模型原理,用数学模型刻画了混合的结构化良性蠕虫对抗蠕虫的传播过程.最后,对于该模型进行了仿真试验.通过仿真结果,总结了影响混合的结构化良性蠕虫对抗蠕虫传播的四个因素:探针探测和探针的蠕虫检测的响应时间,探针的蠕虫检测率和探测率.混合的结构化良性蠕虫对抗蠕虫的传播模型可以使得人们更好地理解良性蠕虫对抗蠕虫的效果.Due to the active immunity of hosts, benign worms which are utilized to counter against worms have become a new emer- gency response technology. Hybrid structured benign worms are presented, and the deployment and work mechanism of hybrid struc- tured benign worms is designed. Furthermore, the process of hybrid structured benign worms countering against worms is modeled based on infectious model. Finally, the model was simulated. From the simulation, four factors （response time of the scan of the sensor, response time of the worm detection, scan rate and detection rate of the sensor）, which affect hybrid structured benign worms countering against worms, was summarized. The model of hybrid structured benign worm leads to a better understanding of the effec- tiveness of benign worms countering against the propagation of worms.

关 键 词：网络安全 恶意代码 蠕虫 混合的结构化良性蠕虫 蠕虫建模 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]