用关联方法推测网络蠕虫的传播路径

J4 ›› 2009, Vol. 47 ›› Issue (6): 1241-1245.

用关联方法推测网络蠕虫的传播路径

周建秋^1,2, 石伟², 李强²

1. 吉林省血液中心, 长春 130061|2. 吉林大学计算机科学与技术学院, 长春 130012

收稿日期:2009-04-29 出版日期:2009-11-26 发布日期:2010-01-07
通讯作者: 李强 E-mail:li_qiang@jlu.edu.cn

Tracing of Worm Propagation Path Correlation

ZHOU Jianqiu^1,2, SHI Wei², LI Qiang²

1. Blood Center of Jilin Province, Changchun 130061, China;2. College of Computer Science and Technology, Jilin University, Changchun 130012, China

Received:2009-04-29 Online:2009-11-26 Published:2010-01-07
Contact: LI Qiang E-mail:li_qiang@jlu.edu.cn

摘要/Abstract

摘要：

基于蠕虫病毒传播时其前后被感染节点在传播路径上存在着隐含的因果关系, 提出一种使用贝叶斯网络关联方法在线推测网络蠕虫传播路径的算法, 并通过模拟实验进行验证. 实验结果表明, 该算法较不采用关联的算法提高10%正确率, 更适合在线工作方式.

关键词: 蠕虫；传播路径；关联；贝叶斯网络

Abstract:

Though worm is randomly spread, there exists implicit causality between adjacent infected nodes. Based on the analysis of causality, we presented an improved online tracing algorithmBayesian network correlation algorithm to acquire worm propagation path, and analyzed and verified its accuracy and performance through simulation experiments. Experiment result indicates that the detection accuracy of Bayesian network correlation algorithm has been increased by a factor of 10% compared to that of our previous work, this improved algorithm is more suitable for online detection.

Key words: worm, propagation path, correlation, Bayesian network

中图分类号:

TP393

周建秋, 石伟, 李强. 用关联方法推测网络蠕虫的传播路径[J]. J4, 2009, 47(6): 1241-1245.

ZHOU Jianqiu, SHI Wei, LI Qiang. Tracing of Worm Propagation Path Correlation[J]. J4, 2009, 47(6): 1241-1245.

[1]	王丽丽, 于双元. 一种基于社团和分层思想的无标度演化模型[J]. J4, 2012, 50(06): 1169-1174.
[2]	郭东, 杜勇, 胡亮. 基于HDFS的云数据备份系统[J]. J4, 2012, 50(01): 101-105.
[3]	刘敏, 房至一, 王红斌, 张希. 一种新的处理能力优先的权值分配调度算法[J]. J4, 2011, 49(06): 1105-1110.
[4]	刘敏, 房至一, 王红斌, 徐鹏. 基于老化算法的分布式文件缓存算法[J]. J4, 2011, 49(05): 895-900.
[5]	韩璐, 张洁, 包铁, 李金宇, 刘淑芬. 基于SNMP的信息采集系统[J]. J4, 2009, 47(6): 1225-1229.
[6]	胡亮, 金刚, 于漫, 任斐, 任维武. 基于异常检测的入侵检测技术[J]. J4, 2009, 47(6): 1264-1270.
[7]	胡亮, 任维武, 任斐, 刘晓博, 金刚. 基于改进密度聚类的异常检测算法[J]. J4, 2009, 47(05): 954-960.