| P2P僵尸网络跨域体系结构的构建与评估 |
| |
| 引用本文： | 庹宇鹏,张永铮,尹涛.P2P僵尸网络跨域体系结构的构建与评估[J].电子学报,2018,46(4):791-796. |
| |
| 作者姓名： | 庹宇鹏 张永铮 尹涛 |
| |
| 作者单位： | 1. 中国科学院信息工程研究所, 北京 100093;
2. 中国科学院大学网络空间安全学院, 北京 100049 |
| |
| 摘 要： | 针对现有P2P僵尸网络抗追踪性较差的问题，提出了一种P2P僵尸网络跨域体系结构（CRA）.CRA将僵尸主机间的通信严格限制在不同的域之间，并引入IP伪造技术隐藏通信的源IP.考虑到监控全球互联网的不可行性以及IP溯源的困难性，现实中防御者将很难对CRA展开追踪.模拟实验结果表明，较之当前主流的P2P僵尸网络体系结构，CRA具备更好的抗追踪性和鲁棒性.
|
| 关 键 词： | 僵尸网络 体系结构 跨域 IP伪造 抗追踪 |
| 收稿时间： | 2016-09-19 |
Modeling and Evaluating a Cross-Realm Architecture for P2P Botnet |
| |
| TUO Yu-peng,ZHANG Yong-zheng,YIN Tao.Modeling and Evaluating a Cross-Realm Architecture for P2P Botnet[J].Acta Electronica Sinica,2018,46(4):791-796. |
| |
| Authors: | TUO Yu-peng ZHANG Yong-zheng YIN Tao |
| |
| Affiliation: | 1. Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China;
2. School of Cyber Security, University of Chinese Academy of Sciences, Beijing 100049, China |
| |
| Abstract: | To construct a tracking-resistant P2P botnet,a Cross-Realm Architecture (CRA) was proposed.CRA strictly restricts bots' interactions across different realms and hides the origins of bots' interactions by IP spoofing.Considering the infeasibility of monitoring the global Internet and the difficulty of IP traceback,it is very hard for defenders to track CRA in the real world.The simulation results show that compared to recent popular P2P botnet architectures,CRA has better anti-tracking performance and robustness. |
| |
| Keywords: | botnet architecture cross-realm IP spoofing anti-tracking |
|
| 点击此处可从《电子学报》浏览原始摘要信息 |
|
点击此处可从《电子学报》下载全文 |
|
