• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2008, Vol. 30 ›› Issue (5): 15-19.

• 论文 • 上一篇    下一篇

基于可控蠕虫的W-A-W传播模型研究

张殿旭 张怡   

  • 出版日期:2008-05-01 发布日期:2010-05-19

  • Online:2008-05-01 Published:2010-05-19

摘要:

利用良性蠕虫来对抗蠕虫是一种新的蠕虫对抗技术。本文针对WAW模型中对抗蠕虫状态不可控、产生流量过大等问题提出了可控蠕虫的概念,给出了可控蠕虫的定义、分布式框  架结构和工作流程,并将可控蠕虫用作W-A-W中的对抗蠕虫,给出了可控蠕虫对抗蠕虫传播模型。经验证明,和已有良性蠕虫相比,用可控蠕虫对抗蠕虫产生流量影响更小状态更易控制,在不影响模型效果的情况下降低了模型的复杂度。

关键词: 蠕虫对抗蠕虫 可控蠕虫 传播模型

Abstract:

Friendly Worrn-Anti-Worm(W-A-W) is a new active worm countermeasure, but the state of the anti-worm used in W-A-W can not be controlled and frequent ly brings heavy traffic itself. To solve these problems, we propose the concept of controllable worm. The definition, distributed framework and work flo  w of the controllable worm are presented. Then we use the controllable worm to fight worms and propose a "Controllable Worm-Anti-Worm" model (CW-A-W   ). We analyze the propagation model of CW-A-W, and prove that the controllable worm has the merits of low traffic and controllable state,and can reduce     e the complexity of the W-A-W model.

Key words: worrn-anti-worm controllable worm propagation model