推测网络蠕虫传播路径在线聚积算法.pdfVIP

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software , Vol.21, No.4, April 2010, pp.802−815 doi: 10.3724/SP.J.1001.2010.03514 Tel/Fax: +86-10 © by Institute of Software , the Chinese Academy of Sciences . All rights reserved. ∗ 推测网络蠕虫传播路径的在线聚积算法 1,2+ 1,2 李 强 , 向 阳 1(吉林大学 计算机科学与技术学院,吉林 长春 130012) 2(吉林大学 符号计算与知识工程教育部重点实验室,吉林 长春 130012) Algorithm of Online Accumulation for Reconstructing the Path of Worm Propagation LI Qiang1,2+, XIANG Yang1,2 1(College of Computer Science and Technology, Jilin University, Changchun 130012, China) 2(Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, Jilin University, Changchun 130012, China) + Corresponding author: li_qiang@ Li Q, Xiang Y. Algorithm of online accumulation for reconstructing the path of worm propagation. Journal of Software, 2010,21(4):802−815. /1000-9825/3514.htm Abstract : Tracing online propagation paths when worm breaks out on a large scale can improve the network’s anti-attackability. The existing tracing approaches to obtain worm propagation path are all based on off-line analysis and usually have a lower accuracy. This paper proposes an online Accumulation Algorithm with sliding detection windows, which can fleetly and efficiently trace the origin and initial causal edges of the worm. The algorithm solves the conflicts in choosing causal edges and tackles the problem of merging propagation paths in the consecutive reconstruction phase. The algorithm’s accuracy and performance have been analyzed. Experimental results reveal that the