计算机工程 ›› 2008, Vol. 34 ›› Issue (21): 115-117,.doi: 10.3969/j.issn.1000-3428.2008.21.042

• 安全技术 • 上一篇    下一篇

基于信息关联的P2P蠕虫检测方法

张 静1,胡华平1,2,肖枫涛1,刘 波1   

  1. (1. 国防科技大学计算机学院,长沙 410073;2. 福建师范大学网络安全与密码技术重点实验室,福州 350007)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2008-11-05 发布日期:2008-11-05

P2P Worm Detection Method Based on Information Correlation

ZHANG Jing1, HU Hua-ping1,2, XIAO Feng-tao1, LIU Bo1   

  1. (1. College of Computer, National University of Defense Technology, Changsha 410073; 2. Key Lab of Network Security and Cryptology, Fujian Normal University, Fuzhou 350007)
  • Received:1900-01-01 Revised:1900-01-01 Online:2008-11-05 Published:2008-11-05

摘要: P2P蠕虫对P2P网络和Internet构成巨大安全威胁。该文根据P2P网络报文之间的关系,提出一种P2P蠕虫检测方法,通过建立过滤规则实现对P2P蠕虫的检测与抑制。模拟实验结果表明,该方法对P2P蠕虫传播的抑制效果与资源分布存在较大联系,其检测效果 良好。

关键词: P2P蠕虫, 传播, 检测, 抑制

Abstract: P2P worm has become a severe threat to the P2P network and Internet. This paper presents a P2P worm detection method according to the relations between the messages in P2P network, and establishes a series of filter rules to realize the detection and containment for P2P worm. Simulation experimental results show that the distribution of resources has a great influence on the effect of containment for P2P worm propagation in this method and this method has a good effect on P2P worm detection.

Key words: P2P worm, spread, detection, containment

中图分类号: