P2P文件共享系统中的恶意代码防治策略

A Malware Defence Strategy for P2P File-Sharing System

目前,P2P技术已经被广泛地应用在文件共享系统中,存在多个基于P2P的文件共享软件,拥有众多用户。与此同时,也出现了针对这些P2P文件共享系统的蠕虫和病毒等恶意代码。P2P系统的分布式控制、拓扑结构动态变化等特性使得恶意代码传播更快、更难防治。文章通过分析这些P2P恶意代码的传播方式,提出了一种基于恶意代码行为特征的恶意代码识别方法,并利用这种识别方法制定了一个适合P2P文件共享系统的恶意代码防治策略来减缓、遏制恶意代码的传播。

Peer-to-Peer（P2P） has been widely adopted in file-sharing system recently.While more and more people begin to use P2P file-sharing software,many P2P worms and viruses appear and spread in those P2P file-sharing systems.The characteristics of P2P system,such as decentralized control,large scale,and extreme dynamism,make it more difficult to detect and defend malware.In this paper,we propose a P2P malware defence strategy whose core part is a baheviorbased malware detection method.This strategy can be combined with present P2P file sharing systems to restrain the spreading of malware in those systems.