基于节点自杀的对等网络蠕虫防治方法

摘要

结合P2P网络的特点,提出了基于节点自杀的P2P蠕虫防治方法.基于主动探测P2P蠕虫检测方法是一套分布式系统,该系统依赖于分散在P2P网络中的探测节点来收集和分析P2P蠕虫流量,从而建立P2P蠕虫的流量特征,并用于对P2P蠕虫的识别.基于节点自杀的P2P蠕虫防治方法首先采用节点污染技术,将具备蠕虫检测和防御能力的节点分散在P2P蠕虫传播网络中.当这些具备检测功能的节点发现可疑的蠕虫传播流量时,采用自杀方式退出P2P网络,并将相关信息向自己的邻居节点进行通告,从而可有效遏制P2P蠕虫的快速传播.%A suicide based defensive approach is proposed in this paper. In this novel defensive solution, a set of defensive nodes with capacity of detecting P2P worms will be deployed into a P2P network. While P2P worms break out, these defensive nodes will collect P2P worm data to construct a detection model to prevent the spreading of P2P worms. First, these defensive nodes will suicide to avoid being infected and exploited after P2P worm breaking out. Furthermore, each suicide node will also send a warning message to its neighbors to take preventive actions.