文档介绍：摘要
摘要
网络蠕虫经常被用来盗取用户的私人信息、毁坏用户的系统和发起DoS攻击等,给网络安全造成了严重的威胁。近年来,随着P2P网络应用的不断增加, P2P蠕虫也随之迅速发展起来。由于P2P蠕虫利用了P2P网络的固有特性(如本地路由表、应用层路由等),具有更强的隐蔽性和更快的传播速度,所以一旦爆发,蠕虫更加严重。因此,研究P2P蠕虫的防御策略变得非常迫切。蠕虫的原理和特性的基础上,分析了 P2P蠕虫的防御现状,重点针对LIU等人提出的基于ADPBBWH的P2P蠕虫防御策略进行了深入研究,并做了几点改进,进一步改善了防御的效果。
本文首先概述了论文研究的背景和意义,对P2P蠕虫的特性进行了深入分析,并研究了P2P蠕虫的防御现状。其次,分析了LIU等人提出的基于ADPBBWH 的P2P蠕虫防御策略:根据两个节点拥有的不同漏洞数反应了节点间的差异程度这一思想构建基于最大距离的P2P网络,利用网络的这种拓扑结构抑制恶意蠕虫的传播;利用Hitlist良性蠕虫主动清除节点上的恶意蠕虫,并为存在漏洞的主机安装补丁程序,形成安全的P2P网络。再次,改进了上述P2P蠕虫防御策略:根据漏洞被P2P蠕虫利用的频率和导致的危害程度为各种类型的漏洞赋予相应的权值,使该策略针对所用漏洞比较严重的P2P蠕虫的防御效果更加突出;在构建基于最大距离的P2P网络时,通过限制一个节点可能蔓延到邻居节点的潜在危害程度,调整网络的拓扑结构,进一步抑制P2P恶意蠕虫的传播; 在利用Hitlist良性蠕虫对抗恶意蠕虫时,优先免疫易感染邻居节点较多的节点, 在最短时间内围堵住恶意蠕虫,最大程度地减少了该恶意蠕虫造成的危害。最后,对改进后的蠕虫防御策略进行了仿真实验。实验结果表明,改进后的策略确实能更好地防御恶意蠕虫,而且对所用漏洞比较严重的P2P恶意蠕虫的防御效果尤为明显,验证了该策略的有效性和优越性。
关键词:P2P网络漏洞恶意蠕虫良性蠕虫Hitlist
Abstract
Abstract
worms are often exploited to steal users’private information,destroy users’systems and launch DoS aRacks,thus they cause tremendous damage to the recent years,with the increasing of applications in works,more and more P2P e worms utilize the characteristics of P2P
networks such as local routing table and application layer routing,SO nley are more concealed and、析t11 greater spreading P2P worms break out,they will cause more serious damage than Intemet worms,so studying the policies of defending works against malicious worms es very ,I studied the principles and characteristics of Intemet worms and the existing defense policies against P2P WOrmS,especially studied in depth the defense policy based on ADPBBWH which is proposed by LIU etc,then I improved LIU’S policy,and the effect of defending against malicious worms es better.
First of all,this paper outlined the background and significance of my research; this paper analyzes in depth the characteristics of P2P wOrITIS and studies many existing defense policies against P2P worms;Secondly,this paper expatiated and
analyzed the defense policy based