网络蠕虫

网络蠕虫与IDS防范

Network worm and IDS Defense

通过构建防御网络蠕虫的P2P重叠网，建立大规模网络环境下的网络蠕虫防御系统，继而对网络蠕虫进行有效的遏制。于是，本论文针对基于P2P技术的网络蠕虫防御机制进行了深入的研究。

By building an Internet worm defense-oriented P2P overlay network , establishing a large-scale Internet worm defense system , it is possible to restrain Internet worm effectively .

随着Internet的迅速发展，网络蠕虫已严重威胁着网络信息安全。

With the rapid growth of Internet , Internet worms have threatened network security seriously .

基于P2P系统的网络蠕虫传播研究

Research on Worms Propagation Based on P2P Networks

创新性地提出了使用压缩算法PPM来预测和检测网络蠕虫。

We innovatively used the proposed PPM compression algorithms to predict and detect network worms .

基于ISP分布的网络蠕虫检测系统

Internet-Worm Detecting System Based on ISP Distributed

网络蠕虫之所以难于控制主要是由于Internet本质上是一个开放的复杂巨系统，其结构复杂，缺乏中心控制能力以及其开放性的特征导致存在大量网管层面上的不可控节点。

Internet worms are difficult to eliminate because Internet is an open and complex scale-free system , and there are a mass of vulnerable nodes , which are absent of managing and defending .

基于Honeypot的网络蠕虫联动对抗技术

Association Technique Anti-worm Base on Honeypot

基于ISP分布，提出了一种通过检测TCPRESET包来发现扫描源的网络蠕虫早期检测系统。

An Internet-worm early detecting system based on ISP distributed is proposed in this paper , which relies on TCP RESET packet detecting to find the scan sources .

一种基于NetFlow的网络蠕虫检测算法

NetFlow based detecting worm algorithm

最后，重点对BillyGoat检测机制进行了详细的论述，通过对BillyGoat系统的分析，为网络蠕虫检测技术的准确性和高效性提供了思路。

Finally , the Billy Goat detection mechanisms were discussed in detail , the idea was provided that detect network worm accurately and efficiently by analyze Billy Goat system .

第二个模型基于SEIR模型，考虑了网络蠕虫出生率和死亡率的影响。

The second one , based on the SEIR model , considers the birth rate and death rate of Internet worms .

因此，本论文考虑到在文件共享领域已经获得巨大成功的P2P技术，它在分布式计算领域具有潜在的应用前景，这正是大规模网络蠕虫防御体系所需要的计算环境和模式。

So we will concern the P2P technologies which are quite successful in the areas of file sharing . It has potential in the field of distributed computing applications , which is the necessary computing environment and mode needed in large-scale Internet worm defense system .

自从1988年Morris蠕虫爆发以来，网络蠕虫就在不断地威胁着网络的安全.传统防范措施已不再适用于蠕虫的防治，使用良性蠕虫来对抗蠕虫正成为一种新的应急响应技术。

Since the Morris worm occurred in 1988 , worms have threatened the network persistently , the traditional anti-virus technologies no longer scale to deal with the worm threat , and benign worms become a new active countermeasure .

本课题在典型蠕虫病毒样本剖析的基础上，深入研究了网络蠕虫病毒的作用机理及防治策略，并给出了利用DNS服务器抑制网络蠕虫病毒传播的系统设计与实现方案。

The subject aims at studying the function of internet worm virus and prevention 's methods , and making a systemic design and program which control the spread of internet worm virus by DNS service machine at the base of analysis of the typical internet worm virus samples .

这样，CAW只负责网络蠕虫行为的分析、检测以及管理，而将蠕虫的清除、图形界面的管理以及组件更新等常用组件交给病毒防御软件来控制。

In general , CAW only focus on the analysis , detection and management for network worm , transfer the elimination virus , UI manage and components update to some virus protection software to control .

根据网络蠕虫攻击的特点，建立了能够反映蠕虫扫描特征的失败连接流量（FCT）时间序列，提出了一种基于FCT时间序列小波包能量特征和支持向量机（SVM）的蠕虫检测新方法。

To detect scanning network worm attack , failed connection flow ( FCT ) time series is established based on characteristics of worm attack , and a novel approach for worm detection based on energy features of FCT time series and support vector machine ( SVM ) is proposed .

通过分析网络蠕虫攻击的特点，定义了能够反映蠕虫攻击特征的失败连接流量偏离度（FCFD）的概念，并提出了一种基于FCFD时间序列分析的蠕虫早期检测方法。

On the basis of analyzing the features of worm attack , the concept of failed connections flow dissimilarity ( FCFD ) which reflects the variation of network flow caused by worms attack is defined , and a novel approach for early detection of worms is proposed .

基于公共特征集合的网络蠕虫特征码自动提取

Automatic extraction of Internet worm signature based on common feature set

特别是网络蠕虫的出现，给人们造成了很大的困扰。

Specially the network worm gives people a lot of trouble .

面向内网的网络蠕虫检测系统设计与实现

Design and Implementation of Network Worm Detection System for Internal Network

揭示了传统计算机病毒尤其是网络蠕虫病毒的原理和机制，同时提出有效的防治措施。

Then it gives efficient measures of virus prevention and cure .

基于元胞自动机的网络蠕虫病毒传播仿真

Simulation of Worm Viruses Spread in Network Based on Cellular Automata

因此研究网络蠕虫的相关技术十分重要。

So the technology research about the Internet worm is very important .

网络蠕虫预警与隔离控制方法研究

Research on Early Warning and Quarantine Control of Internet Worm

当然，它也成了网络蠕虫传播的通道。

However , it also becomes a place where network worms spread .

网络蠕虫成为恶意代码研究中的首要课题。

Network worms malicious code has become the primary subject of study .

详细分析了网络蠕虫的传播机制。

The propagation mechanism of Internet worms is analyzed minutely .

基于能量特征和支持向量机的网络蠕虫检测方法

Detection of Network Worm Based on Energy Features and Support Vector Machine

基于良性蠕虫的网络蠕虫主动遏制技术研究

Friendly Worm Based Active Countermeasure Technology to Contain Network Worm