论文部分内容阅读
针对网络蠕虫传播特征,对主动蠕虫传播模型进行了修正和改进,进而提出了一种基于子网保护的蠕虫传播模型.该模型在保证实际使用地址数和利用保护比例的修正模型的情况下,考虑了不同的扫描策略、每个周期的有效扫描数以及本地优先扫描等因素,并用它们评价了基于本地网络的蠕虫检测定位方法对蠕虫在整个网络中的传播速率的抑制效果.计算结果表明,如果网络中的多数子网都能部署蠕虫防御系统,则能大幅降低蠕虫在全网中的传播速率.
Aiming at the characteristic of network worm propagation, the active worm propagation model was modified and improved, and then a worm propagation model based on subnet protection was proposed.With the modification of the actual number of addresses and the protection ratio, Considering different scanning strategies, the number of effective sweeps per cycle and the local preference scanning, we use them to evaluate the effect of local network-based worm detection and localization method on the worm propagation rate in the whole network.The results show that, If most of the subnetworks in the network are capable of deploying worm prevention systems, the worm’s propagation rate across the entire network can be significantly reduced.