资源描述:
《research on the propagation models and defense techniques of internet worms (1)》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、万方数据JOURNALOFELECTRoNICSCIENCEANDTECHNOLOGYOFCHINA,VOL.6,NO.1。MARCH2008ResearchonthePropagationModelsand.DefenseTechniquesofInternetWormsTian-YunHuangAbstraa--Internetwormisharmfultonetworksecurity,andithasbecomearesearchhotspotinrecentyears.AthoroughsurveyOHthepropagati
2、onmodelsanddefeflsetechniquesofInternetwormismadeinthispaper.We6rstgiveitsstrictdefinitionanddiscussthewetkingmechanism.Wethenanalyzeandcomparesomerepre-sentativewormpropagationmodelsproposedinrecentyears,suchasl(.Mmodel,two-factormodel,worm.anti-wormmodelOVAW),firewaH.b
3、asedmodel,quarantine-basedmodelandhybridbenignworm.basedmodel,ete.Sometypicaldefensetechniquessuch嬲virtualhoneypot,activewormpreventionandagent-orientedwormdefense,e由c..arealsodiscussed.Thefuturedirectionofthewormdefensesystemispointedout./ndex死伊Defensesystem,Internetwor
4、m,networksecurity,propagationmodel.1.IntroductionInternetwormscanbetracedbacktothefirstworm/virus‘Morris’in1988t¨.Inrecentyears.networkwormssuchasCodeRed,Nimda,咖2Blaster,etc.。becomemoreandmorepopular,tlleycausegreatdamageandaresodangeroustonetworksecurity.Ithasbecomeastr
5、ingenttasktokeepawayInteractwormsinordertoprotectasafenetworkenvironment阻13].Atpresenttime,researchesonthedefenseofIntemetwormscanbesummedupasfollows.1)Basedonthechain-propagationmodeofworms,pluguponeorsomekeynodesinnetworks。soastoavoidnumbersofdownstreamnodesbeinginfect
6、ed.2)DetectOCCUl陌enCCandpropagationofworlusbyinformationsharingmechanismsamongnodes,tocooperativelypreventthespreadingofworms.3)Beforeextensivelyspreadingofwormthreats,changeorcutoffsomeconnectionsamongnodesdynamically,toholdbackthediscoveryprocessofsuspiciouscodeinagive
7、naddressspace.们Monitortheresourceconsumptioninanetwork,andrestrictbandwidthofsomeconnectionstodelaythewormpropagationspeed.5)SearchsuspiciousmaliciousManuscriptreceivedNovember05,2007:revisedJanuary10。2008.ThisworkwassupportedbytheResearchFundfortheNationalCommitteeofChi
8、naunderGrantNo.05XN09.T.·Y.Hu雒giswithSchoolofComputerScienceandTechnology,SouthwestUniversityforNatiuna