| 基于Kademlia的新型半分布式僵尸网络 |
| |
| 引用本文： | 李鹤帅,朱俊虎,周天阳,王清贤.基于Kademlia的新型半分布式僵尸网络[J].计算机工程,2012,38(8):92-94. |
| |
| 作者姓名： | 李鹤帅 朱俊虎 周天阳 王清贤 |
| |
| 作者单位： | 国家数字交换系统工程技术研究中心,郑州,450002 |
| |
| 摘 要： | 使用Kademlia协议的僵尸网络可利用海量合法流量隐藏攻击行为，但单纯使用Kademlia容易被防火墙拦截。针对该问题，设计一种基于Kademlia的新型半分布式僵尸网络。通过将Hybrid Botnet的主干部分由非结构化网络改为Kademlia网络，使之能规避防火墙，同时网络流量较小，通过仿真实验证明新型僵尸网络较传统网络具有更好的流量特性和鲁棒性。并给出3种抵御新型网络的防御措施。
|
| 关 键 词： | Kademlia网络 命令控制机制 P2P网络 半分布式 僵尸网络 防火墙 |
| 收稿时间： | 2011-06-21 |
New Semi-distributed Botnet Based on Kademlia |
| |
| LI He-shuai
,
ZHU Jun-hu
,
ZHOU Tian-yang
,
WANG Qing-xian.New Semi-distributed Botnet Based on Kademlia[J].Computer Engineering,2012,38(8):92-94. |
| |
| Authors: | LI He-shuai ZHU Jun-hu ZHOU Tian-yang WANG Qing-xian |
| |
| Affiliation: | (National Digital Switching System Engineering and Technological Research Center,Zhengzhou 450002,China) |
| |
| Abstract: | Botnet based on Kademlia can easily be hidden in the legitimate traffic,but Botnet which uses Kademlia as its protocol may be detected because of firewall’s blocking.This paper designs a new semi-distributed Botnet based on Kademlia.By changing hybrid Botnet’s backbone from unstructured network to Kademlia network,it can circumvent firewall and has small flow.Simulation comparison experiments show that the new Botnet has better flow characteristics and robustness than traditional Botnets.And three kinds of defensive mechanisms against the designed Botnet are proposed. |
| |
| Keywords: | Kademlia network Command and Control(C&C) mechanism P2P network semi-distributed Botnet firewall |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程》浏览原始摘要信息 |
|
点击此处可从《计算机工程》下载全文 |
