| 一种p2p Botnet在线检测方法研究 |
| |
| 引用本文： | 柴胜,胡亮,梁波.一种p2p Botnet在线检测方法研究[J].电子学报,2011,39(4):906-912. |
| |
| 作者姓名： | 柴胜 胡亮 梁波 |
| |
| 作者单位： | 1. 吉林大学计算机科学与技术学院,吉林长春,130012
2. 国家质检总局信息中心,北京,100088 |
| |
| 基金项目： | 国家重点基础研究发展计划(973计划)，吉林省科技发展计划资助项目 |
| |
| 摘 要： | 文章详细分析了p2p僵尸网络的生命周期以及网络特征,利用改进的SPRINT决策树和相似度度量函数,提出了一种新的在线综合检测方法,并论述了虚拟机环境搭建、原型系统设计和实验结果分析.实验结果表明,检测方法是可行的,具有较高的效率和可靠性.
|
| 关 键 词： | 僵尸网络 对等网络 检测 |
| 收稿时间： | 2010-03-02 |
The p2p Botnet Online Detect Approach Research |
| |
| CHAI Sheng,HU Liang,LIANG Bo.The p2p Botnet Online Detect Approach Research[J].Acta Electronica Sinica,2011,39(4):906-912. |
| |
| Authors: | CHAI Sheng HU Liang LIANG Bo |
| |
| Affiliation: | 1. College of Computer Science and Technology Institute,Jilin University,Changchun,Jilin 130012,China;2. AQSIQ Information Center,Beijing 100088,China |
| |
| Abstract: | The life cycle and network characteristics of p2p botnet was analyzed,improved sprint method and similarity function was discussed and new online detect approach was proposed.Secondly,the virtual machine network environment,the design of prototype system and the analysis of the experiment result was discussed.The result shows that the detection approach is feasible,high efficient and reliable. |
| |
| Keywords: | botnet p2p network detect |
| 本文献已被 万方数据 等数据库收录！ |
| 点击此处可从《电子学报》浏览原始摘要信息 |
|
点击此处可从《电子学报》下载全文 |
|
