The design and evaluation of a defense system for Internet worms
The design and evaluation of a defense system for Internet worms
复制标题
网络蠕虫防御系统的设计与评估
DOI：
10.1109/reldis.2004.1353017
复制
发表时间：
2004
期刊：
影响因子：
--
通讯作者：
J. Knight
中科院分区：
文献类型：
--
作者：
R. Scandariato;J. Knight
社会的许多领域已经变得严重依赖交通设施、公用事业等服务，而这些服务在一定程度上是通过大量的计算机和通信连接来实现的。过去的事件和研究都表明，精心设计的互联网蠕虫可以以相当简单的方式使这类系统瘫痪，最值得注意的是，只需几分钟。这表明需要防御蠕虫，但它们的速度排除了手动对抗蠕虫爆发的可能性。我们提出了一个在超大型网络中模拟互联网活动蠕虫流行行为的平台。反应控制系统在平台的顶部运行，并提供监控/分析/响应方法来自动处理感染。给出了高度可配置的平台的详细信息和各种实验性能结果。
Many areas of society have become heavily dependent on services such as transportation facilities, utilities and so on that are implemented in part by large numbers of computers and communications links. Both past incidents and research studies show that a well-engineered Internet worm can disable such systems in a fairly simple way and, most notably, in a matter of a few minutes. This indicates the need for defenses against worms but their speed rules out the possibility of manually countering worm outbreaks. We present a platform that emulates the epidemic behavior of Internet active worms in very large networks. A reactive control system operates on top of the platform and provides a monitor/analyze/respond approach to deal with infections automatically. Details of our highly configurable platform and various experimental performance results are presented.