移动僵尸网络检测方法研究

摘要

The popularity of mobile devices and its powerful functions have attracted more and more attacks. An attacker uses a variety of electronic equipment used by people to spread the virus to other mobile devices on the network. The mobile devices with infected virus can be integrated into mobile Botnet to obey the dictates from the master control machine in the mobile Botnet and to infect other ma-chines and control the transmission of information. Without the use of effective measures,the mobile Botnet has been expanding so quick-ly that the master control machine could have the potential to control the whole network leading to a great threat to the security of the whole network. Since the current solution for the threat of mobile botnet is still under evolution and unable to detect malicious attacks. Therefore it is an urgent need to develop the means of classification,detection and response for mobile Botnet. In order to improve effi-ciency and accuracy of detection,the detection method of mobile botnet has been analyzed in detail. The results integrated with other com-prehensive investigations show that the hybrid analysis has greatly improved efficiency and accuracy of the mobile Botnet detection.%移动设备的普及和强大功能引来了越来越多的网络攻击。攻击者利用人们所使用的各种电子设备，将病毒传播到网络上。感染了病毒的移动设备，将会被加入到移动僵尸网络中，听从移动僵尸网络主控机的指挥，去感染其他机器并控制其传送信息。如不采用有效措施，随着移动僵尸网络的不断扩大，僵尸主控机有控制整个网络的可能，给整个网络安全带来极大的威胁。当前的移动僵尸网络威胁的解决方案还处于改善阶段，无法完全地检测到恶意攻击，因此迫切地需要更多的有关移动僵尸网络的分类、检测和响应等方面的研究。为了不断提高检测的效率和准确率，对移动僵尸网络的检测方法进行了详细的分析。综合其他研究成果可知，混合的分析方式可以大大地提高僵尸网络检测的效率和准确率。