基于P2P的僵尸网络防治技术研究  

Research on botnet control technology based on P2P

作　　者：聂利颖[1] 高静[1] 

机构地区：[1]郑州成功财经学院信息工程系,河南巩义451200

出　　处：《现代电子技术》2016年第11期86-89,94,共5页Modern Electronics Technique

基　　金：河南省社科联;河南省经团联研究课题"智能手机在高校学生中的应用研究"阶段性研究成果(SKL-2015-2103)

摘　　要：针对传统DDo S防御方法只能进行被动防御攻击,无法根除攻击流量这一问题,提出了IP城域网清洗方案。在研究了典型P2P僵尸网络Super Net的架构、传播和引导策略、抖动处理方法、交互和控制策略以及参数选择的基础上,给出了传统防御方法的不足。最后针对现有的僵尸网络,设计了IP城域网清洗方案,同时给出了攻击流量识别方案、引流方案、DDo S流量清洗方案和正常流量回注技术的实现方法。Since the traditional DDo S（distributed denial of service）defense method can only perform the passive defense attack,and is unable to eradicate the attack flow,the IP MAN（metropolitan area network）cleaning solution is put forward. On the basis of the study of the Super Net architecture of typical botnet based on P2 P,propagating and guiding strategy,dither processing method,interaction and control strategy,and parameters selection,the shortcomings of the traditional defense methods are given. In terms of the available botnets,the IP MAN cleaning scheme was designed. The implementation methods of attact flow identification scheme,drainage scheme,DDo S flow cleaning scheme and normal flow reinjection technology are given.

关 键 词：僵尸网络 分布式拒绝服务攻击 流量清洗 P2P协议 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TM417[自动化与计算机技术—计算机科学与技术]