僵尸网络研究

Study on Botnet

僵尸网络是一种从传统恶意代码形态进化而来的新型攻击方式,为攻击者提供了隐匿、灵活且高效的一对多命令与控制机制,可以控制大量僵尸主机实现信息窃取、分布式拒绝服务攻击和垃圾邮件发送等攻击,僵尸网络对因特网安全已造成严重威胁。深入研究分析了僵尸网络的三种模型,并对僵尸网络的发现、追踪进行了探讨。

Botnet is a novel attack strategy evolved from traditional malware forms, which provides attackers with stealthy, flexible and efficient one-to-many commands and control mechanisms, and could control a number of zombies achieve information theft, distributed denial-of-service, and spam sending. Botnet is a serious threat to the Internet security. In this paper, three models of botnet are analyzed in depth, and the latest techniques in finding and tracking the botnet are also discussed.