为了解决恶意代码防御软件存在的滞后性问题,提出一种可普遍适用于互联网和内联网的基于云端计算架构的恶意代码联合防御机制.首先将传统的云计算拓展成新型云端计算,发挥云端计算环境中的集群服务器端和用户终端各自的优势以及两者的联动作用,有效地利用云端计算环境中的服务器集群集成多种恶意代码防御引擎,同时联合海量用户终端节点来主动提供恶意代码报告,使得整个网络系统能及时、有效地抵御恶意代码的攻击.具体给出了基于云端计算架构的恶意代码联合防御机制的体系架构和工作流程.为了进一步提高系统的工作性能,还提出了一种基于节点信誉的恶意代码报告评价与排序算法,从而使系统能够及时处理最有价值的恶意代码报告.通过仿真实验和性能分析对算法性能和系统的恶意代码防御能力以及服务器端负载与网络开销进行分析.实验与分析结果表明基于云端计算架构的恶意代码联合防御机制可以较小的系统代价高效地防御层出不穷的各类恶意代码.
In order to solve a series of deficiencies in current anti-virus software,such as lagging behind the production of malicious codes,a new joint defense mechanism of malicious code based on the cloud client computing architecture is proposed,which is suitable for both the Internet and the Intranet computing environment.Firstly,the traditional cloud computing is expanded into the cloud client computing.The server-side cluster and user-side terminals are both facilitated playing their respective advantages and utilizing the linkage between each other.A variety of malicious code defense engines are integrated in the server-side cluster.The large-scale terminal nodes are responsible for providing reports of malicious code,making the network and every node effectively protected against malicious code attacks in time.The architecture and workflow of the cloud--client-based joint defense mechanism of malicious code is described in detail.In order to improve system performance further,the evaluation and sorting algorithm of malicious code report is also presented,with which the most valuable reports can be processed by the system in time.Simulation experiments and system performance analysis were implemented to test the efficiency of algorithm,the malicious code defending ability of the system,the load of servers and the traffic of networks.The results show that the mechanism can effectively resist endless malicious codes of all kinds with low costs.