摘要
Botnet(僵尸网络)是由bot(僵尸主机)组成的可通信、可被攻击者控制的网络,而P2P botnet是一种利用P2P技术构建控制信道的僵尸网络。对比于以往具有明显追踪特征的P2P botnet而言,一种基于双层架构的P2Pbotnet在控制感染主机方面采用了更加隐蔽和灵活的方式,使追踪难度增大。通过模拟实验对基于这种通信控制模型的僵尸网络进行了功能和性能方面的研究,并提出了相应的防御与追踪方案。
A collection of bots connected to a network which is controlled by attackers is called a Botnet, P2P botnets are bots that use P2P technology to accomplish certain tasks, The two-tier structure P2P botnet is more hidden and flexible in controlling infected host, while the existing P2P botnets only have obvious tracking features. Its functions and performance are critically studied both from experiments and theoretical analysis, In addition, the corresponding defense and tracking schemes are given.
出处
《计算机工程与设计》
CSCD
北大核心
2008年第11期2724-2726,2747,共4页
Computer Engineering and Design
关键词
僵尸网络
双层架构
感染
再感染
防御策略
botnet
two-tier structure
infection
reinfection
defense strategy
