摘要
目前,P2P技术已经被广泛地应用在文件共享系统中,存在多个基于P2P的文件共享软件,拥有众多用户。与此同时,也出现了针对这些P2P文件共享系统的蠕虫和病毒等恶意代码。P2P系统的分布式控制、拓扑结构动态变化等特性使得恶意代码传播更快、更难防治。文章通过分析这些P2P恶意代码的传播方式,提出了一种基于恶意代码行为特征的恶意代码识别方法,并利用这种识别方法制定了一个适合P2P文件共享系统的恶意代码防治策略来减缓、遏制恶意代码的传播。
Peer-to-Peer(P2P) has been widely adopted in file-sharing system recently.While more and more people begin to use P2P file-sharing software,many P2P worms and viruses appear and spread in those P2P file-sharing systems.The characteristics of P2P system,such as decentralized control,large scale,and extreme dynamism,make it more difficult to detect and defend malware.In this paper,we propose a P2P malware defence strategy whose core part is a baheviorbased malware detection method.This strategy can be combined with present P2P file sharing systems to restrain the spreading of malware in those systems.
出处
《计算机工程与应用》
CSCD
北大核心
2006年第24期152-156,共5页
Computer Engineering and Applications
基金
上海市科委发展基金资助项目(编号:7A05722)