基于卡尔曼滤波的Internet蠕虫预警系统研究

当前INTERNET蠕虫的频频爆发,使得蠕虫传播成为网络安全的焦点问题。文中结合INTERNET蠕虫的传播模型,提出了通过卡尔曼滤波估计蠕虫的传染率,从而推断网络上是否有新蠕虫传播的INTERNET蠕虫预警系统,并进行了仿真分析。仿真结果表明采用卡尔曼滤波是进行INTERNET蠕虫预警的一种有效方法。

Improving Internet Worm Warning System Based on Kalman Filter

Zou et al proposed an Internet worm warning system based on Kalman filter~(1]) which needs,in our opinion,to be improved in two respects to be pointed out later.In the full paper,we discuss these two respects in detail;here we can only describe them in general terms.The workflow of the system designed by us consists of four steps;step 3 contains essential details of procedure not mentioned in Ref.1 and thus improves Ref.1 in one respect.The mathematics in designing the needed Kalman filter is given in much detail and we correct what we believe to be erroneous in the mathematics of Ref.1 and thus improve Ref.1 in another respect.By improving the Internet worm warning system,we can achieve early and accurate estimation by Kalman filter of the worm's infection rate,thus ensuring cyberspace security by preventing its quick propagation.Simulation results show that the system improved by us provides an effective way for Internet worm warning.