“震荡波”蠕虫分析与防范

Analysis and Prevention of “Sasser” Worm

分析了“震荡波”蠕虫的行为,包括它的传播方式、传播特征和被感染主机的特征。剖析了“震荡波”蠕虫网络攻击的两个主要步骤:寻找漏洞和感染系统,并指出了它的危害性,同时给出了清除“震荡波”蠕虫的方法和步骤;最后对该蠕虫的防范给出了一些建设性的建议。

The behaviors of “sasser” worm is analyzed, including its propagation way, its characteristics and the characteristics of infected hosts. The two steps of “sasser” worm for attacking network are analyzed, those are seeking the vulncrabilities and infecting system, furthermore, its compromises are pointed out. Simultaneously, the paper brings forward some methods and steps to remove “sasser” worm. Finally, some constructive suggestions are provided to prevent the worm.