摘要： 针对现有网络蠕虫预警方法的不足，通过对网络蠕虫繁衍原理和行为模式的分析，提出一种基于客户端的网络蠕虫预警方法。改进了现有方法中所有操作均在服务器端进行的不足。与现有的网络蠕虫预警方法比较，新方法更加有效，而且能够预警未知的蠕虫。又因为这种方法结合了客户端和服务器端的功能，所以大大减轻了服务器端的负担。

关键词: 网络蠕虫；预警；客户端；网络行为

Abstract: This paper presents an approach to forecasting the Internet worms infection based on client after analyzing the behavior pattern of Internet worms. It improves existing methods which mainly operates on the server side and designs a forecasting algorithm for client and server respectively. Comparing with the existing methods, the approach becomes more efficient, and has the characteristic of detecting the unknown Internet worms. Because this approach is based on client, it reduces the burden of server side a lot.

Key words: Internet worm; Forecast and warning; Client; Network behavior