基于计算机网络的蠕虫防御和检测技术

Worm Defense and Detection Technology Based on Computer Network

蠕虫与病毒、木马等同属于常见的恶意代码,它可以通过文件共享攻击、缓冲区溢出探测等方式侵占目标主机,造成系统瘫痪和重要数据丢失。随着网络安全技术的发展,蠕虫防御和检测技术也取得了长足进步。本文首先介绍了蠕虫的网络增长模式,随后介绍了几种常见的蠕虫防御和检测技术,如防火墙保护、网络入侵检测、蜜罐技术以及Ethical蠕虫与反击技术等。随后设计了一种基于计算机网络的蠕虫防御与检测系统,并对该系统的实时监控模块、内核服务函数挂钩模块展开简要分析,为现代计算机网络实现蠕虫的主动防御和智能检测提供了技术支持。

Worms,viruses and Trojans are common malicious codes.They can invade the target host through file sharing attacks,buffer overflow detection,etc.,resulting in system paralysis and loss of important data.With the development of network security technology,worm defense and detection technology has also made great progress.This paper first introduces the network growth mode of worms,and then introduces several common worm defense and detection technologies,such as firewall protection,network intrusion detection,honeypot technology,and Ethical worm and counterattack technology.Then a worm defense and detection system based on computer network is designed,and the real-time monitoring module and kernel service function hooking module of the system are briefly analyzed,which provides technical support for the modern computer network to realize the active defense and intelligent detection of worms.