一种僵尸网络的拓扑研究及反制算法分析-topology research and anti-control algorithm analysis of a botnet.docxVIP

摘要摘要僵尸网络是一种从传统恶意代码形态进化而来的新型攻击方式，为攻击者提 供了隐匿、灵活且高效的一对多命令与控制机制，可以控制大量僵尸主机实现信 息窃取、分布式拒绝服务攻击和垃圾邮件发送等攻击目的。僵尸网络正步入快速 发展期，对因特网安全已造成严重威胁，对中国大陆造成的危害尤为严重。本文 介绍了僵尸网络的基本定义和演化过程，深入剖析了僵尸网络的功能结构与工作 机制，讨论了僵尸网络的命令与控制机制和传播模型，并实现了目前主流的研究 技术——蜜网技术，并归纳总结了目前跟踪、检测和防御僵尸网络的最新研究成 果。然后实例分析了目前典型的僵尸病毒 Phatbot 及其形成的网络，并在此基础上 对僵尸网络的拓扑结构进行全面分析，找到了僵尸网络的联系特征、结构特征和 社会网络特征，然后提出基于桥梁节点和基于通信线路的两种反制算法。最后探 讨了僵尸网络的发展趋势和进一步的研究方向。本文提出的基于社会网络分析的两种僵尸网络反制算法，利用他们可以比较 准确地发现僵尸网络中的关键节点、桥梁节点和关键连接，并通过对关键节点的 处理，可以有效地减缓僵尸网络的传播速率；通过对桥梁节点和关键链接的监控 和阻断，能够以最小代价破坏僵尸网络的拓扑结构，有效地控制僵尸网络的传播。关键词：僵尸网络，社会网络，反制，拓扑结构IABSTRACTABSTRACTBotnet is a novel attack strategy evolved from traditional malware forms;it provides the attackers stealthy,flexible and efficient one-to-many Command and Control mechanisms,which can be used to order an army of zombies to achieve the goals including information theft,launching distributed denial of service,and sending spam. Botnet has stepped into the expanding phase,and has been a serious threat to Internet security,especially in China mainland. In this thesis,the evolution process, concept,functional structure and execution mechanism of Botnet are presented,the Command and Control mechanisms and propagation model are discussed,and advance two methods of control Botnet.the latest techniques on Botnet tracking,detection and prevention are reviewed. The developing trends of Botnet and further topics in this area are also analyzed.We opposes two kinds Botnet that the network analyses owing to society brought forward by the main body of a book making an algorithm, key node and bridge node in the network making use of them to be able to discover a corpse comparatively accurately links up, and by being able to slow down a corpse effectively to key node treatment, network propagation rate;Pass the supervisory control to the bridge node and key interlinkage and hinder breaking, can the network topology structure destroying a corpse with minimal price , the network propagation controlling a corpse effectively.Keywo