网络蠕虫已对网络系统安全造成重要威胁,传统防范措施已不再适用.使用良性蠕虫来对抗蠕虫正成为一种新的应急响应技术.提出了良性蠕虫基于网络拓扑信息的扩散技术,并重点研究了基于平衡树的良性蠕虫扩散算法、平衡树的动态生成规则和稳定性增强策略.最后给出一个蠕虫对抗模拟实验,结果表明,和已有的传播策略相比,采用扩散平衡树策略的良性蠕虫扩散速度更快,产生流量影响更小.
Worms is a serious and growing threat to network and the traditional anti-virus technologies don't currently scale to deal with the worm threat. Friendly worm becomes a new active countermeasure. A diffusing balance-tree-based friendly worm propagation strategy is proposed, and the auto-generation rules and survivability enhancements are also given to account for the expansibility and the stability. As a case study, a simulation on worms cross-spreading is given. The results prove that the balance-tree-based propagation strategy is much more effective. Compared with the traditional ones, it accelerates the propagation speed and reduces the traffic impact on network.