基于镜像蜜罐的USB病毒传播动力学研究  

Research on USB malware propagation dynamics based on ghost USB honeypot

作　　者：李汉伦 任建国 Li Hanlun;Ren Jianguo(School of Computer Science&Technology,Jiangsu Normal University,Xuzhou 221116,Jiangsu,China)

机构地区：[1]江苏师范大学计算机科学与技术学院,江苏徐州221116

出　　处：《江苏师范大学学报（自然科学版）》2023年第4期59-65,共7页Journal of Jiangsu Normal University：Natural Science Edition

基　　金：江苏省自然科学基金面上项目(BK20201462);徐州市自然科学基金面上项目(KC21018);江苏师范大学研究生科研与实践创新计划项目(2021XKT1400)。

摘　　要：针对图书馆、打印室等公共场所缺少对USB病毒统一有效的防御措施,且没有相关模型研究独立于网络的“移动介质—计算机—移动介质”双向传播模式的USB病毒传播规律的问题,建立基于镜像蜜罐的USB病毒传播模型.首先,通过再生矩阵法得到控制病毒消亡的参数;然后,证明无病平衡点的局部稳定性;最后,通过仿真实验验证移动介质的更换率、从移动介质到计算机的感染率和从计算机到移动介质的感染率、移动介质使用者的主观行为、网络拓扑结构和镜像蜜罐等因素之间的关联以及对病毒传播行为的影响.结果表明,提高移动介质使用者的安全意识可以使镜像蜜罐充分发挥抑制病毒传播的作用.In view of the lack of unified and effective defense measures against USB malware in public places,such as libraries and printing rooms etc.,and no relevant model to study the propagation law of USB malware in the bidirectional propagation mode of"mobile vector-computer-mobile vector"independent of the network,a USB malware propagation model based on ghost USB honeypot is established.At first,the parameters for controlling malware extinction are obtained through the next-generation matrices,and then,the local stability of disease-free equilibrium point is proved.Finally,the correlations among the mobile vector replacement rates,the infection rates of from mobile vector to computer and from computer to mobile vector,the subjective behavior of mobile vector users,the network topology,and the ghost USB honeypot and their influences on malware transmission behavior are verified through simulation experiments.Experimental results show that improving the safety awareness of users of mobile vector could make ghost USB honeypot play a full role in inhibiting malware transmission.

关 键 词：USB病毒 镜像蜜罐 移动介质 局部稳定性 网络拓扑结构 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]