网络蠕虫的分类及其传播模型研究.docVIP

网络蠕虫的分类及其传播模型研究 　　摘要:近几年,蠕虫频繁爆发,已成为互联网安全的主要威胁。为了清楚地理解蠕虫所造成的威胁,很有必要对蠕虫进行分类,以便进行深入的研究。该文对目前蠕虫传播模型进行了深入地研究,主要包括随机网络和无尺度网络上的模型。指出在构建无尺度网络时现有算法的一个共同缺陷――没有考虑链路的成本。最后预测了蠕虫的发展趋势,并提出了一些蠕虫防御的措施。 　　关键词:网络蠕虫;传播模型;无尺度网络;恶意代码 　　中图分类号:TP393文献标识码:A文章编号:1009-3044(2009)27-7635-03 　　 　　Research of Internet Worm Taxonomy and Propagation Model 　　XIE Chun-yan1, MA Hai-bin2, LIANG Wei3 　　(1.College of Physics Science and Information Engineering, Hebei Normal University, Shijiazhuang 050016, China;2.College of Career Technology, Hebei Normal University, Shijiazhuang 050016, China;3.International School in Hebei Province, Shijiazhuang 050061, China) 　　Abstract: In recent years, the worms that had a dramatic increase in the frequency and virulence of such outbreaks have become one of the major threats to the security of the Internet. In order to clearly understand the threat caused by Internet worm, it is necessary to classify the worms so that we can thoroughly study them. The taxonomy principles are mainly based on scanning strategy, propagation way, destructive capability, worm author’s motivation and so on. The design of precise worm propagation models makes for understanding the propagation mechanism of worm so that we can utilize more efficient prevention approaches. This paper thorough investigates current worm propagation models, which are mainly based on random network and scale-free network. A common drawback in existing algorithms that does not consider the cost of the links is pointed out when scale-free network is established. Finally, the trends of worm are forecasted and some prevention ways are pointed out. 　　Key words: network worm; propagation model; scale-free network; malicious code 　　 　　现在网络蠕虫越来越容易传播,从第一个蠕虫――Morris蠕虫到现在出现过很多种蠕虫,为了能更好地防御蠕虫,就必须理解蠕虫的不同属性(扫描策略、激活方式、传播途径等)、蠕虫编写者的意图和构建准确的传播模型,尽量变被动挨打为主动出击,降低其造成的损失。 　　 　　1 网络蠕虫的定义及分类 　　 　　网络蠕虫是无须计算机使用者干预即可运行的独立程序,它通过不停地获得网络中存在漏洞的计算机上的部分或全部控制权来进行传播。蠕虫与病毒的最大区别在于它不需要人为干预,而且能够自主不断地复制和通过网络传播。 　　D.Ellis[1]提出了一个“生命周期”(