基于垃圾邮件发送模型的僵尸网络监测

Model-based Spam Botnet Monitoring

僵尸网络可以用于发送垃圾邮件,这意味着如果能够对垃圾邮件的发送行为进行建模,也能够很好地检测僵尸网络。本文提出几种垃圾邮件发送模型,对各种垃圾邮件发送行为进行了区分,基于主题特征产生的协同程度提出了僵尸网络指数,其中重点对其在僵尸网络监测效果进行了验证,发现这个模型和指数能够用于有效发现发送邮件的僵尸网络。

The Botnet can bedeployed as the spam sender.tt meahs that the well modeled spam senders＇behavior can detect the botnet too.Three spare senders＇ types were given to classify spare sending behavior.Based on the subject character generation＇s Cooperation degree,the hornet factor is;posed to detect the hosts of the botnet. Its application in the real networking＇ suggests that the model and the botnet factor can be used to effectively disclose the botnet which send spam.