具有异构感染率的僵尸网络建模与分析  

Modeling and Analysis of Botnet with Heterogeneous Infection Rate

作　　者：牛伟纳[1,2] 张小松[1,2] 杨国武[1] 卓中流 卢嘉中 NIU Wei-na;ZHANG Xiao-song;YANG Guo-wu;ZHUO Zhong-liu;LU Jia-zhong(School of Computer Science and Engineering,University of Electronic Science and Technology of China,Chengdu 611731,China;Center for Cyber Security,University of Electronic Science and Technology of China,Chengdu 611731,China)

机构地区：[1]电子科技大学计算机科学与工程学院,成都611731 [2]电子科技大学网络空间安全研究中心,成都611731

出　　处：《计算机科学》2018年第7期135-138,153,共5页Computer Science

基　　金：国家自然科学基金面上项目(61572115);四川省重大基础研究课题(2016JY0007)资助

摘　　要：僵尸网络作为共性攻击平台,采用目前先进的匿名网络和恶意代码技术为APT攻击提供了大量有效资源。为了有效控制僵尸网络的大规模爆发,需研究其构建规律。考虑到在传播过程中僵尸网络的不同区域具有不同的感染率,结合疾病传播模型,提出了一种具有异构感染率的僵尸网络传播模型。首先,通过对僵尸网络稳态特征的分析,使用平均场方法从动力学角度研究了其传播特性;然后,在BA网络中通过模拟实验来分析异构感染率如何影响僵尸网络的传播阈值。实验结果表明,该模型更符合真实情况,且僵尸程序传播阈值和异构感染率的关系与节点数量无关。Botnet,as a common attack platform,uses the current advanced anonymous network and malicious code technology to provide a lot of effective resources for APT attacks.In order to effectively control the large-scale outbreak of botnet,it is necessary to study its construction rules.This work proposed a botnet propagation model with heterogeneous infection rate based on disease model due to nodes with different infection rates in different regions.Through analyzing the characteristics of botnet in the steady-state,the mean-field approach is used to study its propagation characteristics from the dynamic point of view.Then,how the heterogenous infection rate affects the botnet propagation threshold in BA network is explored.The experimental results show that the proposed model is more realistic,and the relationship between threshold and heterogeneous infection rate has nothing to do with the number of nodes.

关 键 词：僵尸网络 动力学 异构感染率 疾病传播模型 平均场方法 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]