作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2006, Vol. 32 ›› Issue (23): 1-3. doi: 10.3969/j.issn.1000-3428.2006.23.001

• 博士论文 •    下一篇

基于无尺度易感应用网络的拓扑蠕虫传播模型

彭雪娜,赵 宏   

  1. (东北大学软件中心,沈阳 110004)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2006-12-05 发布日期:2006-12-05

Topology Worm Propagation Model Based on Scale-free Susceptible Application Network

PENG Xuena, ZHAO Hong   

  1. (Software Center of Northeast University, Shenyang 110004)
  • Received:1900-01-01 Revised:1900-01-01 Online:2006-12-05 Published:2006-12-05

摘要: 分析了基于无尺度易感应用网络的拓扑蠕虫的传播特性,包括其感染整个应用网络所需要的传播时间和其在传播过程中对相关主机和网络资源的占用情况等。通过与扫描蠕虫相比较,分析出该类拓扑蠕虫传播时间更短,并且在传播过程中具有更好的隐蔽性,在实施最终攻击前很难被检测,从而使其对网络和主机具有更大威胁。针对这种威胁,文章提出了几种用于检测和防御基于无尺度网络应用拓扑蠕虫的可能方法。

关键词: 拓扑蠕虫, 传播模型, 无尺度网络, 蜜罐, 网络连通性

Abstract: A scale-free susceptible application network based topology worm propagation model is introduced, and its several features are analyzed, including its full infection time and resource occupation feature and etc. Compared with other worms, the worm is both faster and stealthier, and harder to be detected before final malicious attack. All these special features make it an even more risky worm type. According to its latent threat, several possible defense mechanisms are also introduced.

Key words: Topology worm, Propagation model, Scale-free network, Honeypot, Network connectivity