提前对特定漏洞可能出现的攻击数据包进行特征提取,并以此特征为基础描述了一种可以阻断未来针对特定漏洞恶意攻击的蠕虫防范方法,最后提出一种新的蠕虫防范模式和存在的一些问题。
Basing on creating the signature of the possible attacking packets on specifically vulnerability in advance, this paper describes a new method to prevent the worms, which can be used to hold back the fast propagation of the new worms. At the end, a new model to keep away the worms is pointed out, and some problems about it are discussed.