基于Kademlia协议的高生存性P2P僵尸网络  

New P2P botnet with high survivability based on Kademlia protocol

作　　者：朱俊虎[1] 李鹤帅[1] 王清贤[1] 邱菡[1] 

机构地区：[1]信息工程大学,郑州450002

出　　处：《计算机应用》2013年第5期1362-1366,1377,共6页journal of Computer Applications

摘　　要：为了提高僵尸网络的生存能力,通过对现有反僵尸网络技术的分析,从攻击者角度提出了一种基于Kademlia协议的高生存性P2P僵尸网络,通过设计一套通信加密认证和节点身份认证机制提高了僵尸网络的生存能力,理论分析表明该机制可以较为有效地应对伪造命令攻击和女巫攻击,并通过实验证明了新型僵尸网络的高生存性。At present there are many kinds of technologies which can track, detect and counter botnet effectively, whieh are serious threats to botnet. In order to improve the survivability of botnets, with the analysis on the existing anti-botnet technology, the paper proposd a new P2P-botnet based on Kademlia protocol from an attackers prospective. A communication encryption and node authentication mechanism was designed. The theoretical analysis shows that the mechanism can effectively address improper command attack and sybil attack. Eventually, the experimental results verify that this botnet has high survivability.

关 键 词：Kademlia网络 僵尸网络 生存能力 加密认证 女巫节点 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]