research on the propagation models and defense techniques of internet worms (1)

《research on the propagation models and defense techniques of internet worms (1)》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、万方数据JOURNALOFELECTRoNICSCIENCEANDTECHNOLOGYOFCHINA，VOL．6，NO．1。MARCH2008ResearchonthePropagationModelsand．DefenseTechniquesofInternetWormsTian-YunHuangAbstraa--Internetwormisharmfultonetworksecurity,andithasbecomearesearchhotspotinrecentyears．AthoroughsurveyOHthepropagati

2、onmodelsanddefeflsetechniquesofInternetwormismadeinthispaper．We6rstgiveitsstrictdefinitionanddiscussthewetkingmechanism．Wethenanalyzeandcomparesomerepre-sentativewormpropagationmodelsproposedinrecentyears,suchasl(．Mmodel,two-factormodel,worm．anti-wormmodelOVAW)，firewaH．b

3、asedmodel,quarantine-basedmodelandhybridbenignworm．basedmodel，ete．Sometypicaldefensetechniquessuch嬲virtualhoneypot,activewormpreventionandagent-orientedwormdefense,e由c．．arealsodiscussed．Thefuturedirectionofthewormdefensesystemispointedout．／ndex死伊Defensesystem，Internetwor

4、m，networksecurity,propagationmodel．1．IntroductionInternetwormscanbetracedbacktothefirstworm／virus‘Morris’in1988t¨．Inrecentyears．networkwormssuchasCodeRed，Nimda,咖2Blaster,etc．。becomemoreandmorepopular,tlleycausegreatdamageandaresodangeroustonetworksecurity．Ithasbecomeastr

5、ingenttasktokeepawayInteractwormsinordertoprotectasafenetworkenvironment阻13]．Atpresenttime,researchesonthedefenseofIntemetwormscanbesummedupasfollows．1)Basedonthechain-propagationmodeofworms，pluguponeorsomekeynodesinnetworks。soastoavoidnumbersofdownstreamnodesbeinginfect

6、ed．2)DetectOCCUl陌enCCandpropagationofworlusbyinformationsharingmechanismsamongnodes，tocooperativelypreventthespreadingofworms．3)Beforeextensivelyspreadingofwormthreats,changeorcutoffsomeconnectionsamongnodesdynamically,toholdbackthediscoveryprocessofsuspiciouscodeinagive

7、naddressspace．们Monitortheresourceconsumptioninanetwork,andrestrictbandwidthofsomeconnectionstodelaythewormpropagationspeed．5)SearchsuspiciousmaliciousManuscriptreceivedNovember05，2007：revisedJanuary10。2008．ThisworkwassupportedbytheResearchFundfortheNationalCommitteeofChi

8、naunderGrantNo．05XN09．T．·Y．Hu雒giswithSchoolofComputerScienceandTechnology,SouthwestUniversityforNatiuna