基于节点异质度分析的蠕虫遏制方法研究  

Research on Worm Containment Strategy Based on Node Heterogeneity Analysis

作　　者：陈天平[1] 崔文岩[1] 孟相如[1] 许媛[2] 

机构地区：[1]空军工程大学信息与导航学院,西安710077 [2]中电集团第39研究所,西安710065

出　　处：《电子科技大学学报》2016年第2期270-275,共6页Journal of University of Electronic Science and Technology of China

基　　金：国家自然科学基金(61201209;61401499);陕西省自然科学基金(2013JQ8013)

摘　　要：分析了自传播蠕虫的行为特性,对网络节点异(同)质度、拓扑区隔度进行定义及量化。在此基础上,提出了基于拓扑区隔度优化的蠕虫遏制方法,通过增大拓扑区隔度以达到抑制蠕虫传播速度的目的。提出了基于网络监测的良性蠕虫主动对抗方法,将良性蠕虫的扫描范围限定于高危易感主机群,从而更好地兼顾了蠕虫遏制有效性和网络资源消耗低两个方面的优势。采用matlab7.0对上述方法进行了仿真验证,仿真结果表明,以上方法均具有较好的蠕虫遏制效果。The behavior characteristics of self propagating worms is analyzed, and the nodes heterogeneity, topology segmentation degree are defined and quantified. On this basis, the worm containment strategy based on the optimization of topological segmentation degree is put forward, and the method for increasing topological segmentation degree is studied. In addition, the active counterplot of benign worms based on network monitoring is proposed, the worm＇s scanning range is limited to high-risk groups susceptible hosts, so as to better take into account the effectiveness of worm containment and network resource consumption advantages of low two aspects. Matlab7.0 is adopted to the simulation of worm propagation model under the condition of the above strategies. The simulation results show that the above methods have better worm containment effect.

关 键 词：遏制方法 网络蠕虫 节点异质度 拓扑区隔度 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]