作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2012, Vol. 38 ›› Issue (04): 140-142. doi: 10.3969/j.issn.1000-3428.2012.04.045

• 安全技术 • 上一篇    下一篇

具有排列扫描特征的多态蠕虫传播模型

汪 洁,王建新,何小贤   

  1. (中南大学信息科学与工程学院,长沙 410083)
  • 收稿日期:2011-09-05 出版日期:2012-02-20 发布日期:2012-02-20
  • 作者简介:汪 洁(1980-),女,讲师、博士、CCF会员,主研方向:网络与信息安全;王建新,教授、博士;何小贤,讲师、博士
  • 基金资助:
    中央高校基本科研业务费专项基金资助项目(2010122000 59);中南大学自由探索计划基金资助项目(2011QNZT035)

Propagation Model of Polymorphic Worm with Permutation Scanning Characteristic

WANG Jie, WANG Jian-xin, HE Xiao-xian   

  1. (School of Information Science and Engineering, Central South University, Changsha 410083, China)
  • Received:2011-09-05 Online:2012-02-20 Published:2012-02-20

摘要: 多数蠕虫传播模型都是基于简单的随机扫描,蠕虫形态相对固定。为此,研究排列扫描技术,结合自然生物的取食繁殖规则,提出一种多态蠕虫动态传播的数学模型。通过一系列相互独立的方程表现蠕虫的整体行为,计算传播过程中各类被感染蠕虫的数目。仿真实验结果表明,该模型能准确描述多态蠕虫的传播过程。

关键词: 排列扫描, 多态蠕虫, 传播模型, 多态变形技术

Abstract: Most of models are based on single random scanning, and worm has relatively fixed morphology. In view of this problem, this paper researches on permutation scanning technique, combines natural biological feeding and breeding rules, and proposes a mathematical model to characterize the dynamic propagation of polymorphic worms. The overall behavior of the worm is presented and the number of different type of worms in the process of propagation is analyzed by a series of inter-dependent equations. Experimental simulation result shows that this model can describe polymorphic worm propagation exactly.

Key words: permutation scanning, polymorphic worm, propagation model, polymorphic and metamorphic technology

中图分类号: