【摘要】 蠕虫特征产生系统是一种利用大量的、分布式部署在Internet的监控器共同协作,从而产生和发布有效的蠕虫特征的新型安全系统.该系统产生的蠕虫特征可以配置到防火墙或者路由器中以遏制蠕虫的传播.虽然它是一项比较有效的对抗蠕虫的安全技术,但是其自身存在一些严重的安全问题,特别是当一个或者少数几个系统节点被黑客控制后,它们可能被利用来阻碍系统产生蠕虫特征,篡改系统发布的特征甚至误导系统发布虚假的特征,这些都会严重影响系统产生特征的可靠性.针对现有系统存在的问题,作者提出了一种基于门限签名的可靠蠕虫特征产生系统,它通过数字签名技术保证系统产生的蠕虫特征是可验证的,同时,为了避免单点失效和提供高可靠性,作者利用一种改进的双层门限签名机制来产生签名.可靠性分析表明,新系统能够抵抗攻击者对部分系统节点的各种形式的攻击,在可靠性上优于现有的主流蠕虫特征产生系统.更多还原

【Abstract】 Worm Signature Generation System(WSGS)is a new sort of security systems that generate and disseminate worm signatures by deploying many monitors at different sites of the Internet.The signatures can be used by firewalls or content filters to contain the spread of worms.While it is a promising technology to combat with Internet worms,WSGS has some serious security problems.When one or a few system components are compromised and controlled by attackers,they may conceal,modify or forge worm signatures,thus make the signatures generated by WSGS undependable.Motivated by the security challenges of existing systems,this paper presents a dependable WSGS based on threshold signature technology,which generates verifiable worm signatures through digital signature,so that any parties receive the signatures can verify their correctness.Furthermore,to avoid single point of failure and provide highly attack resilient,it applied an improved two-tier threshold signature scheme to generate digital signatures.Security analysis shows that the system can tolerant various attacks to a few components.更多还原