基于诱骗的中心控制病毒防卫模型研究

互联网的迅速扩大,网络成为病毒传播的主要手段,网络病毒随之产生。与传统的基于主机的病毒相比,网络病毒有更强的繁殖能力,传播能力和破坏能力。防范网络病毒成为当前研究的重点,产生了许多不同的病毒传染模型和网络病毒检测方法。文中分析了病毒传播机制后,提出一种新颖的网络病毒的检测方法———基于诱骗的中心控制病毒防卫模型。在该模型中利用监测器检测网络是否发生异常,利用诱骗技术来捕获病毒的样本并把该样本提交给管理中心进行处理,并研制出相应的疫苗发放给组织内的所有主机,达到防护的目的。最后给出了一旦检测器发生错误判断后病毒在该检测模型中的传染模型。

Research on Virus Defence Model Based on Honeypot

With the extending of Internet,the network is being the mainly means of virus spreading.Comparing with the traditional virus in host,the network-virus has stronger propagation,transmitting and destruction.The defense of network-virus is a key investigation.Therefore many different virus-spreading models and network-virus detection are proposed.After analyzing the mechanism of virus spreading,this paper presents a novel detection of network-virus-central control based on honeypot virus defences model.In this model, we use the monitor to check whether the network is normal and honeypot to capture the virus swatch,and then deliver the virus swatch to the central workstation.The central workstation processes the swatch and develops the corresponding bacteria.After this,the central workstation hands out the bacteria to the hosts in the organization.This paper also gives the virus-spreading model after the monitor gives the wrong judgement on Internet influx.