Networks中文翻译.pdfVIP

KYE ：Fast-Flux Service Networks 中文翻译 翻译：廖建华 校稿：诸葛建伟 Know Your Enemy: 了解你的敌人： Fast-Flux Service Networks Fast-Flux 服务网络 An Ever Changing Enemy 永远处于变化中的敌人 The Honeynet Project Research Alliance 蜜网项目组蜜网研究联盟 Last Modified: 13 July, 2007 最后修改日期：2007年7月13日 翻译：廖建华 校稿：诸葛建伟 INTRODUCTION One of the most active threats we face today on the Internet is cyber-crime. Increasingly capable criminals are constantly developing more sophisticated means of profiting from online criminal activity. This paper demonstrates a growing, sophisticated technique calledfast-flux service networks which we are seeing increasingly used in the wild. Fast-flux service networks are a network of compromised computer systems with public DNS records that are constantly changing, in some cases every few minutes. These constantly changing architectures make it much more difficult to track down criminal activities and shut down their operations. 引言 当前我们面对最活跃的互联网威胁之一是网络犯罪。能力日益增强的犯罪者在不断地发展能从网络犯罪中获利的更为先进 和狡猾地方式。本文阐述了一个正在发展中的，精心设计称之为Fast-flux服务网络的技术，这项技术的实际应用日益增多。 Fast-flux服务网络是由一些被控制的计算机系统组成，这些计算机系统的公共DNS记录在持续变化，甚至有些时候每隔几分 钟就变化一次。这种DNS记录不断变化的机制致使犯罪行为的追踪和阻断更为困难。 In this paper we will first provide an overview of what fast-flux service networks are, how they operate, and how the criminal community is leveraging them, including two types which we have designated as single-flux and double-flux service networks. W