蠕虫攻击的分析与即时检测方法研究

Analysis of Worms Attack and Research on Real-Time Detection Method

对蠕虫的基本程序结构进行分析并对蠕虫的传播步骤进行阐述,根据蠕虫攻击的特点,提出一个即时检测蠕虫攻击的方案,该方案将实际主机间的通信情况映射为通信图,通过对通信图的处理达到准确、快速检测蠕虫攻击的目的。

Analyses the basic procedure of worms and introduces the structure of the worms spread steps according to the characteristics of worm attack, puts forward a real-time detecting worms attack program which will map the practical communication situation between hosts into communication graph. Deals with the communication graph so as to realize detecting worm attack accurately and rapidly.