基于主机节点删减的网络蠕虫模拟方法研究  

Research on network worm simulation method based on host node reduction

作　　者：王晓锋[1] 关鹭[1] 

机构地区：[1]江南大学物联网工程学院,江苏无锡214122

出　　处：《计算机工程与设计》2012年第10期3687-3691,共5页Computer Engineering and Design

基　　金：国家自然科学基金项目(61103223);江苏省自然科学基金重点研究专项基金项目(江苏973计划)(BK2011003)

摘　　要：为降低网络蠕虫模拟所需的计算及存储开销,提出了一种基于主机节点删减的简化模拟方法。其基本思路是:删减大规模网络蠕虫模拟拓扑中的部分主机节点,以形成小规模网络拓扑,并基于该小规模拓扑进行蠕虫模拟。基于SEM蠕虫模型分析了该方法能保证被感染节点个数、蠕虫流量速率等参数的模拟真实性,针对DropTail及RED分析了该方法能保证蠕虫数据包转发延迟及丢包的模拟真实性。基于NS2的实验表明:该方法在保证模拟真实性的前提下,降低蠕虫模拟计算开销97%以上,降低存储开销90%以上。To reduce the computation and storage overhead of network worm simulation, a simplified simulation method based on host node reduction is developed. The basic idea of the method is that part of the host nodes in the topology of large-scale net- work worm simulation are reduced to form a small-scale topology, by which the worm simulation is carried out. Analysis by SEM worm model shows that the method can keep the simulation accuracy of parameters, such as the number of infected nodes and the flow rate of worms. Analysis for DropTail and RED shows that the method can keep the simulation accuracy of delay and drop of worm packet forwarding. Experimental validation based on NS2 shows that this method can decrease the computation overhead of worm simulation by over 97%, and can decrease the storage overhead by over 90%, while the simulation fidelity is main- tained.

关 键 词：网络模拟 蠕虫模拟 模拟真实性 计算开销 节点删减 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]