Microscopic simulation of a group defense strategy
Microscopic simulation of a group defense strategy
复制标题
群体防御策略的微观模拟
DOI：
10.1109/pads.2005.13
复制
发表时间：
2005
期刊：
影响因子：
--
通讯作者：
Phillip A. Porras
中科院分区：
文献类型：
--
作者：
L. Briesemeister;Phillip A. Porras
我们提出了一种新的蠕虫遏制策略，它集成了两种互补的蠕虫隔离技术。这两种技术是相互关联的，其中一种策略将另一种策略用作蠕虫感染的指示器。组防御机制在相邻网络之间共享这些指示器，当发生足够的确证时，网络参与流量过滤以阻止感染尝试。提出了一种基于SSFnet的随机扫描蠕虫遏制策略的微观模拟，并探讨了群组防御机制的各种性能特征。仿真结果有助于刻画综合隔离策略既能减缓蠕虫传播又能防止蠕虫达到完全饱和的条件和程度。
We introduce a novel worm containment strategy that integrates two complementary worm quarantine techniques. The two techniques are linked, with one strategy employing the other as an indicator of worm infection. A group defense mechanism shares such indicators among neighboring networks, and when enough corroboration occurs, the network engages in traffic filtering to halt infection attempts. We present an SSFnet-based microscopic simulation of the containment strategy against random scan worms, and explore various performance characteristics of the group defense mechanism. The simulation results help to characterize the conditions and degree to which the integrated quarantine strategy can both slow worm propagation and prevent the worm from reaching its full saturation potential.