一种基于网状关联分析的网络蠕虫预警新方法

A new approach to forecasting Internet worms based on netlike association analysis

通过对网络蠕虫行为模式的分析,提出一种基于网状关联分析的网络蠕虫预警的新方法,并设计了预警算法,建立了网络蠕虫预警模型和基于预警算法的原型系统,最后给出相关实验数据和分析结果。与现有的网络蠕虫检测方法相比校,新方法更加有效,而且能够预警未知的网络蠕虫。

This paper presents a new approach to forecasting the Internet worm infection based on netlike association analysis after analyzing the behavior pattern of Internet worms, and explores their forecast mechanism we design two forecasting algorithms. An Internet worm forecasting model is established and a prototype based on forecasting algorithms is given. At last, we present the related experimental data and analysis results by using our approach. Comparing with the existing methods, our approach becomes more efficient, and has the characteristic of detecting the unknown Internet worms.