基于混合对抗技术的对抗性蠕虫Anti-wormbased-信息通信学术期刊网.PDFVIP

第 28 卷第 1 期 通 信 学 报 Vol.28 No.1 2007 年 1 月 Journal on Communications January 2007 基于混合对抗技术的对抗性蠕虫 王超 1,2, 卿斯汉 1,2, 何建波 1,2 (1.中国科学院 软件研究所,北京 100080; 2.中国科学院 基础软件工程研究中心, 北京 100080) 摘 要：作为对抗 网络蠕虫的一种技术手段,对抗性蠕虫正在引起恶意代码研究 域的关注 。然而当前对抗性蠕虫 所采用的主动对抗技术和被动对抗技术存在若干缺 陷,无法全面有效抑制 网络蠕虫的传播 。为此提 出一种改进 的基 于混合对抗技术的对抗性蠕虫,通过构建蠕虫对抗模型 以及仿真实验对其进行分析,并表 明其能够在有效抑制 网络 蠕虫传播的同时降低对 网络资源 的恶意消耗 。 关键词：网络安全 ；对抗性蠕虫；网络蠕虫；混合对抗技术 中图分类号：TP309 文献标识码 ：A 文章编号：1000-436X(2007)01-0028-07 Anti-worm based on hybrid confronting technology WANG Chao1,2, QING Si-han1,2, HE Jian-bo1,2 (1.Institute of Soft are, Chinese Academy of Sciences, Beij ing 100080, China; 2.National Engineering Research Center of Fundamental Soft are, Chinese Academy of Sciences, Beij ing 100080, China) Abstract:As a type of confrontin Internet worm technolo y, anti-worm has been focused by malicious code researchers. However active and passive confrontin technolo y used by current anti-worms has several faults, which cause anti-worms cannot defend the propa ation of Internet worm effectively and completely. An improved anti-worm based on new hybrid confrontin technolo y was presented. Throu h constructin a confrontin model and several confrontin experiments, this technolo y was analyzed. Then it was proved that this technolo y can both defend the propa ation of Internet worm effectively and reduce the consumption of networ