【作者】 尹俊艳；

【导师】 赵跃龙； 肖正文；

【作者基本信息】 中南大学 ， 软件工程， 2005， 硕士

【摘要】 网络蠕虫所造成的巨大损失早已被大家所看重,一个蠕虫带来的动辄数十亿的损失不亚于一场小规模局部战争,而且信息化程度越高的国家所受的损失就会越大。这就决定了蠕虫病毒在信息对抗中将占有重要的位置。无论是在发达国家还是在发展中国家,无论出于什么目的,都将把对蠕虫病毒的研究放到网络安全研究的重要位置。由于蠕虫与传统病毒有不同之处,以至传统的病毒防治策略应用到对抗蠕虫时,基本上不再适用,对Internet蠕虫病毒的研究迫在眉睫。 到目前为止,针对蠕虫的研究文献大多集中在对某个特定蠕虫的行为描述和清除上,比较全面的研究相对缺乏,对蠕虫攻击性能的研究也都大多为黑客技术爱好者们的私底下研究,本文以功能型蠕虫为主题,比较系统地对蠕虫的各个方面的进行综合研究,主要内容包括: 给出了蠕虫的完整定义:通过对原始蠕虫病毒定义的分析以及比较了计算机病毒和蠕虫病毒之间的联系和区别,给出了蠕虫病毒的完整定义,并对蠕虫病毒的发展历史做了回顾。 对蠕虫行为特征进行了分析:通过对曾经爆发的蠕虫的行为的研究,详细地分析了总体的蠕虫病毒行为特征,并在描述中比较蠕虫和计算机病毒之间的异同;指出蠕虫具有如下行为特征:主动攻击;行踪隐蔽;利用漏洞;通常造成网络拥塞;降低系统性能;产生安全隐患;反复性;破坏性。 研究了功能型蠕虫结构模型及蠕虫病毒的防治技术:通过对曾经爆发的蠕虫的实体进行分解分析,深入研究了蠕虫实体结构模型,为功能型蠕虫的设计打下基础。预测了蠕虫技术的发展趋势,结合蠕虫行为特征以及内部网中传播和Internet中传播的情况,给出功能型蠕虫的利用与防治策略。 通过对蠕虫病毒的完整而详尽的研究,提出强化蠕虫性能的方法,对今后蠕虫病毒的发展和防治方向进行了探讨,同时对如何有效的利用网络蠕虫病毒服务大众提出了较好的设计思路。更多还原

【Abstract】 We have already paid much attention to these great damages brought out by net worms, which will amount to 1000 million at least, just as the damage of a small war. The higher degree of information a country has, the greater damage we will have. So worm viruses are vital to information antagonism. The research of worm viruses will be placed at a most important place of the research of internet safety not only in developed but in developing countries. The strategies of preventing and curing traditional viruses are not useful in killing worms because or their differences. The research of internet worms is necessary and urgent.Up to now, the research of worms are mainly about describing and deleting some certain worms. We lack an overall research. In this passage, I mainly talk about the functional worms, and give a systematic study of all aspects of the worms. The main ideas of this passage are listed below:Making a complete definition to worms by analyzed the traditional definition and comparing the similarities and differences between computer viruses and worm viruses, then giving a review of the development of worm research.Analyzing the behavior characteristics of worms by studied the behaviors of already appeared worms and comparing the similarities and differences between worms and computer viruses. Worms often have such traits: attack initiatively, behaving secretly, making use of leaks, causing blockades, influencing the whole system, bringing out hidden dangers, acting repeatedly and destructively.Studying the structural model of functional worms by decomposed and analyzed the entities of once-existing worms. Predicting the tendency of worm technology and giving the strategies for using and preventing and curing functional worms by connecting worms’ behavior traits andtheir transmission in intra-net and internet.Putting forward methods to strengthen the properties of worms and discussing the development and directions of preventing and curing worms, at last, posing the ways of how to make good use of internet worm viruses.更多还原