计算机工程 ›› 2008, Vol. 34 ›› Issue (24): 13-15.doi: 10.3969/j.issn.1000-3428.2008.24.005

• 博士论文 • 上一篇    下一篇

基于P2P的新型良性蠕虫传播策略

王 斌,丁 飘,谭云桥,桂卫华   

  1. (中南大学信息科学与工程学院,长沙 410083)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2008-12-20 发布日期:2008-12-20

New Anti-worm Propagation Strategy Based on P2P

WANG Bin, DING Piao, TAN Yun-qiao, GUI Wei-hua   

  1. (School of Information Science and Engineering, Central South University, Changsha 410083)
  • Received:1900-01-01 Revised:1900-01-01 Online:2008-12-20 Published:2008-12-20

摘要: 提出一种采用P2P的良性蠕虫传播策略,建立了数学模型,在理论上分析各项参数对其传播情况的影响,并使用SSFNET网络仿真工具对传播模型进行了仿真。仿真结果证明,P2P良性蠕虫可以有效地在授权网络中抑制恶意蠕虫的传播,P2P覆盖的平均度数越高,初始投放数量越多,投放时间越早,P2P良性蠕虫传播就越快。P2P良性蠕虫继承了P2P覆盖网络的特点,使其传播的稳定性、可控性更好,并具有更低的消耗。

关键词: P2P良性蠕虫, 稳定性, 低耗性, 可控性, SSFNET工具

Abstract: Anti-worms are good mobile codes which can travel over the computer networks to fight against malicious worms. Existing anti-worms are often written by hackers. Sometimes these anti-worms even do more harm to networks than malicious worms. Recently, their effect has not been fully explored. This paper proposes a new kind of anti-worm called P2P anti-worm which propagates using P2P techniques. It presents a mathematical analysis and gives a mathematical mode of P2P anti-worm to analyze the propagation and uses SSFNET to simulate the P2P anti-worm vs. pure random scan worm. Results show that P2P anti-worm can slow down the speed of the malicious worm. The paper discusses the relation between the propagation speed and the P2P overlay average degree, the initial number of the anti-worm and the release time delay. Moreover, it finds that the P2P feature makes the anti-worm safer, propagate more stabile, more controllable and cost less.

Key words: P2P anti-worm, stability, lower cost, controllability, SSFNET

中图分类号: