作为对抗网络蠕虫的一种技术手段,对抗性蠕虫正在引起恶意代码研究领域的关注。然而当前对抗性蠕虫所采用的主动对抗技术和被动对抗技术存在若干缺陷,无法全面有效抑制网络蠕虫的传播。为此提出一种改进的基于混合对抗技术的对抗性蠕虫,通过构建蠕虫对抗模型以及仿真实验对其进行分析,并表明其能够在有效抑制网络蠕虫传播的同时降低对网络资源的恶意消耗。
As a type of confronting Internet worm technology, anti-worm has been focused by malicious code researchers. However active and passive confronting technology used by current anti-worms has several faults, which cause anti-worms cannot defend the propagation of Internet worm effectively and completely. An improved anti-worm based on new hybrid confronting technology was presented. Through constructing a confronting model and several confronting experiments, this technology was analyzed. Then it was proved that this technology can both defend the propagation of Internet worm effectively and reduce the consumption of network resource at the same time.