基于Kademlia的僵尸网络命令定向发布机制  

Botnet Directional Command-Release Mechanism Based on Kademlia

作　　者：朱俊虎 李航 邱菡 周天阳 王清贤 

机构地区：[1]数学工程与先进计算国家重点实验室,河南郑州450001

出　　处：《信息工程大学学报》2014年第2期237-241,共5页Journal of Information Engineering University

摘　　要：近年来出现的CXPST攻击等新型攻击,需同时对多个目标实施精确打击以达到大规模网络瘫痪效果,这对实施攻击的僵尸网络提出了同时向不同僵尸节点发布不同命令的要求。已有的命令发布机制只支持同时向所有僵尸节点发布相同命令,无法有效支持新型攻击。为解决该问题,文章提出基于Kademlia的命令定向发布机制,以C类网段为单位进行命令发布范围划分,依据不同命令发布范围生成不同Key值以实现命令的定向发布。针对该机制进行基于虚拟化的网络模拟实验,实验结果验证了机制的有效性。A series of coordinated attacks, such as CXPST, have appeared in recent years, which achieve precision attacks against multiple targets, and require attackers send different commands to different bots simultaneously. However, the existing botnets could not implement such attacks. To solve this problem, this paper proposes a new directional command release mechanism based on Kademlia, which divides the extent of commands based on class C network segments, generates dif- ferent Keys according to different ranges and needs to realize directional command release. For this model, Keys generation algorithm and directional command release mechanism are implemented, emulation experimental environment is built, and its feasibility is verified with several experiments.

关 键 词：僵尸网络 命令定向发布机制 精确打击 Key生成 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]