發(fā)布時(shí)間：2018-06-19 08:36

  本文選題：Challenge策略 + 僵尸網(wǎng)絡(luò)　； 參考：《計(jì)算機(jī)工程》2016年10期

【摘要】：傳統(tǒng)僵尸網(wǎng)絡(luò)檢測(cè)技術(shù)主要考慮在主機(jī)上或者某一個(gè)網(wǎng)關(guān)出口的邊界處檢測(cè)特點(diǎn)區(qū)域網(wǎng)內(nèi)的僵尸節(jié)點(diǎn),規(guī)模較小,檢測(cè)效率較低。為了在更大范圍內(nèi)進(jìn)行有效的對(duì)等網(wǎng)絡(luò)(P2P)僵尸節(jié)點(diǎn)檢測(cè),提出基于Challenge的探測(cè)P2P網(wǎng)絡(luò)中所寄生的惡意僵尸節(jié)點(diǎn)的策略。仿真實(shí)驗(yàn)結(jié)果表明,在超過400萬個(gè)節(jié)點(diǎn)的KAD網(wǎng)絡(luò)中,該檢測(cè)技術(shù)可以檢測(cè)到3 000個(gè)~9 000個(gè)寄生型P2P僵尸節(jié)點(diǎn),能夠估算KAD網(wǎng)絡(luò)中可能存在的寄生型僵尸節(jié)點(diǎn)數(shù)目,對(duì)后續(xù)防御對(duì)象的精準(zhǔn)定位和防御措施的準(zhǔn)確設(shè)計(jì)具有參考作用。
[Abstract]:The traditional botnet detection technology mainly considers the botnet node in the characteristic area network on the host or at the boundary of a gateway exit, which is small in scale and low in detection efficiency. In order to detect P2P zombie nodes effectively in a larger range, a challenge based strategy for detecting malicious zombie nodes in P2P networks is proposed. The simulation results show that in the KAD network with over 4 million nodes, the detection technique can detect 3 000 parasitic P2P botnet nodes, and can estimate the number of parasitic zombie nodes that may exist in the KAD network. It can be used as a reference for precise positioning of defense objects and accurate design of defense measures.
【作者單位】： 國家電網(wǎng)浙江省電力公司電力科學(xué)研究院;國家電網(wǎng)浙江省電力公司信息通信分公司;國防科學(xué)技術(shù)大學(xué)計(jì)算機(jī)科學(xué)與技術(shù)學(xué)院;
【基金】：浙江省杰出青年基金資助項(xiàng)目(LR14F020003)
【分類號(hào)】：TP393.08
，

本文編號(hào)：2039279