IoT僵尸网络传播大规模测量研究  

Large-scale measurement study of IoT botnet infection behavior

作　　者：俞意 李建华 沈晨[3] 王强 刘跃 Yu Yi;Li Jianhua;Shen Chen;Wang Qiang;Liu Yue(Zhejiang National Defense Science and Industry Promotion Center,Hangzhou,Zhejiang 310005,China;Zhejiang Safety Technology Prevention Industry Association;Jinhua Polytechnic;Zhejiang National Defense Science and Industry Promotion Center;QiAnXin Group)

机构地区：[1]浙江省国防科工促进中心,浙江杭州310005 [2]浙江省安全技术防范行业协会 [3]金华职业技术学院 [4]浙江省国防科工促进中心 [5]奇安信集团

出　　处：《计算机时代》2023年第9期37-42,47,共7页Computer Era

摘　　要：物联网终端数量急剧增长,而其自身安全防御能力不足。目前由物联网僵尸网络带来的攻击,已明显影响到社会及工业安全。本文设计了一套专用于捕获IoT僵尸网络传播行为的蜜罐系统HoneyCC,并开展为期半年的大规模测量研究,捕获四亿多攻击数据及5.5万个BotNet样本。在此基础上开展多维度的测量分析,揭露IoT僵尸网络现网态势和传播方法,给出治理和防护建议。The number of IoT terminals is growing dramatically,while their own security defense capability is insufficient.The current attacks brought by IoT botnet have significantly affected the social and industrial security.In this paper,we design a honeypot system HoneyCC dedicated to capturing the propagation behavior of IoT botnets,and conduct a six-month large-scale measurement study to capture more than 400 million attack data and 55,000 botnet samples.On this basis,we carry out a multidimensional measurement analysis to reveal the current network situation and propagation methods of IoT botnets,and give recommendations for governance and protection.

关 键 词：物联网 僵尸网络 漏洞利用 蜜罐 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]