半分布式P2P Botnet命令与控制机制研究

摘要

To analyze the control mechanism and behavior characteristics of P2P Botnet, the bot program of partially decentralized P2P Botnet is researched, and the command and control mechanism is designed, such as injunction issue, propagation, execution and info feedback. Compared with Peacomm and lcbot, performance of command and control mechanism is analyzed based on the average diameter and connectivity of network. According to the result of experiment, the partially decentralized P2P Botnet command and control mechanism has high efficiency and good resiliency. It satisfies the need of new P2P Botnet.%为分析P2P僵尸网络(Botnet)的控制机制与行为特性,研究了半分布式P2P Botnet中bot程序的体系结构,设计了半分布式P2P Bomet的命令与控制机制,包含命令的发布、传播、执行和信息的反馈.从僵尸网络的平均直径和网络连接度,与Peacomm和lcbot两种僵尸网络做了比较,分析了半分布式P2P Botnet命令与控制机制的性能.实验结果表明,半分布P2P Botnet 命令与控制机制具有较高的效率和良好的韧性,符合新型P2P Botnet的要求.