(IM ) 立刻的发送消息在消费者和企业 IM 用户之中成为了最流行的 onlinecommunication 工具之一。它提供立刻的消息交货,是的 aswell 方便文件转移服务。IMprograms 的增加的流行和功能为攻击者使它逐渐地吸引人,特别为蠕虫作家。IM contactlist 提议蠕动发现潜在的牺牲品的一个容易的方法以便蠕虫能完成散布速度的 asurprising。这份报纸首先论述我们在 IM 接触表定义的逻辑网络模仿 IM wormpropagation 的试验性的结果,它被报导是 ascale 免费的网络。然后,为检测并且包含 IM 的存在建议蠕动流行病 arediscussed。最后,为这个目的一个新算法被介绍,它基于 observationof IM 蠕虫交通的双向性质,和它的优点和可能的改进 inimplementation 被分析。模拟结果证明建议算法具有限制 IM 蠕虫繁殖上的 significanteffect。
Instant messaging (IM) has become one of the most popular online communication tools among consumer and enterprise IM users. It provides instant message delivery, as well as convenient file transfer services. The increasing popularity and functionalities of IM programs have made it increasingly attractive for attackers, especially for worm writers. IM contact list offers worm an easy way of finding potential victims so that the worm could achieve a surprising spreading speed. This paper first presents our experimental results of simulating IM worm propagation in the logical network defined by IM contact lists, which is reported to be a scale-free network. Then, the existing proposals for detecting and containing IM worm epidemics are discussed. At last, a new algorithm for this purpose is presented, which is based on the observation of the bi-directional nature of IM worm traffic, and its advantages and possible improvements in implementation are analyzed. The simulation results show the proposed algorithm is of significant effect on restricting IM worm propagation.