摘要
针对蠕虫演变的过程与病毒技术现状,提出了一种混合目标发现策略蠕虫的传播特性模型.通过GTNetS仿真工具对这一新模型的传播特性仿真,与CAIDA实际测量的RedCode v2传播数据相比较,表明改进后的模型能更好地描述病毒的传播规律,并显示出快速传播和持久感染的特征.该模型从创建新型蠕虫传播模型出发,与以往模拟已有蠕虫特征不同.混合目标发现策略蠕虫在发现模块和激活模块有较好的改进,能够有效提高传播效率,降低无效攻击,降低蠕虫被检测清除速率.
Based on an overview of the evolutionary process of worms and the existing virus technology,this paper presents a model of hybrid target found propagation charactertics of strategy worm. The model was simulated by the GTNets simulations tool. Comparison between the predicted result by this model and the real propagation data of Red Code v2 measured by CAIDA in 2001. That shows the improved model gives a better description of worm＇s propagation, which is characteristic of rapid spread and lasting infection. The model starts with the creation of new models of worm spread, which is quite different from the existing way of simulating worms＇ characteristics. There is a good improvement in hybrid strategy of the worm target discovery and activation of the discovery module, which can effectively improve the transmission efficiency, reduce ineffective attacks, decrease the detection and clearance rate of worms.
出处
《西安工业大学学报》
CAS
2012年第1期9-14,共6页
Journal of Xi’an Technological University
关键词
蠕虫
传播模型
混合目标发现
传播效率
GTNetS仿真工具
worms
propagation model
hybrid target discovery
propagation efficiency
the GTNetS simulation tool
