P2P僵尸网络的传播建模与分析  

Propagation modeling and analysis of peer-to-peer botnet

作　　者：冯丽萍[1] 宋礼鹏[2] 王鸿斌[1] 赵青杉[1] 

机构地区：[1]忻州师范学院计算机系,山西忻州034000 [2]中北大学计算机与控制工程学院,太原030051

出　　处：《计算机应用》2015年第1期68-71,共4页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61379125);山西省高校科技创新项目(2013148);山西省自然科学基金资助项目(2012011015-3);忻州师范学院重点学科建设项目(ZDXK201204;XK201307)

摘　　要：为了有效控制自愿式P2P僵尸网络的大规模爆发,从动力学的角度研究了僵尸网络的传播规律。首先,根据僵尸网络的形成过程,建立了一个时滞微分方程模型;其次,通过详细的数学分析得出了有效控制僵尸网络的阈值表达式;最后,数值模拟验证了理论分析的正确性。理论分析和实验结果均表明,当基本再生数的值小于1时,僵尸网络可以被完全控制;否则,安全防御措施只能减小僵尸网络的规模。模拟结果还表明,降低僵尸程序的感染率或提高网络节点的免疫率,可以有效控制僵尸网络的爆发。实际网络管理中,可以通过不均匀分布网络节点、及时下载漏洞补丁等措施控制僵尸程序的传播。To effectively control large-scale outbreak, the propagation properties of the leeching P2P（ Peer-to-Peer）botnet was studied using dynamics theory. Firstly, a delayed differential-equation model was proposed according to the formation of the botnet. Secondly, the threshold expression of controlling botnet was obtained by the explicit mathematical analysis. Finally, the numerical simulations verified the correctness of theoretical analysis. The theoretical analysis and experimental results show that the botnet can be completely eliminated if the basic reproduction number is less than 1.Otherwise, the defense measures can only reduce the scale of botnet. The simulation results show that decreasing the infection rate of bot programs or increasing the immune rate of nodes in the network can effectively inhibit the outbreak of botnet. In practice, the propagation of bot programs can be controlled by some measures, such as uneven distribution of nodes in the network, timely downloading patch and so on.

关 键 词：P2P僵尸网络 网络安全 动力学 病毒模型 计算机病毒 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]