基于安全等级模型的社交网络蠕虫安全检测方法研究
发布时间：2018-10-12 09:04
【摘要】：近几年,网络蠕虫已经成为计算机网络安全中的重大问题。网络蠕虫是一段独立的恶意代码,具备自我复制和传播的能力。传统的网络蠕虫编写成本虽然简单,但是其自我繁殖、恶意发包能力强,扩散速度极快,能够在短时间内大量覆盖网络中主机,耗尽网络资源,造成巨大的经济损失。一旦网络蠕虫大量扩散造成网络瘫痪,恢复工作同样需要耗费大量的时间和资源。继门户网站、搜索引擎后,社交网络成为全球互联网商业模式的第三次浪潮,具有巨大的商业价值。社交型网络蠕虫(以下简称“社交网络蠕虫”)是利用社会工程学以各种方式诱惑用户点击进行传播的一类蠕虫,在保留了传统计算机网络的恶意特性基础上,社交网络蠕虫通过结合社会工程学技术,具备更强的隐蔽性、诱惑性、更长的生存周期,更加复杂的传播方式。针对社交网络蠕虫的安全问题研究,近几年来逐渐得到更多研究人员的关注。 在这样的情况下,本文对当前国内、国际针对传统网络蠕虫、社交网络蠕虫及其相关问题的研究现状进行总结。说明了社交网络蠕虫‘传播模型在社交网络安全问题中的重要性,比较并分析了传染病传播模型、高级传播模型的特性,最终提出了一种基于社交网络的蠕虫传播模型。 阐释了社交网络蠕虫检测技术的重要性；提出了几种检测技术的‘分类,从而深入分析各种检测技术的特性和适用情况；提出了社交网络蠕虫的性能指标,从而更好地评价社交网络蠕虫检测技术；提出了一种基于安全等级模型的社交网络蠕虫检测技术,并对检测的方法和各个模块设计进行说明。
[Abstract]:In recent years, network worms have become a major problem in computer network security. A web worm is a separate piece of malicious code capable of self-replication and propagation. Although the cost of traditional network worm writing is simple, its self-propagation, malicious outsourcing ability, rapid diffusion speed, can cover a large number of hosts in the network in a short time, deplete the network resources, and cause huge economic losses. Once a large number of network worms spread resulting in network paralysis, recovery will also take a lot of time and resources. After portal, search engine, social network has become the third wave of the global Internet business model, which has great commercial value. Social network worm (hereafter referred to as "social network worm") is a kind of worm that uses social engineering to tempt users to click and spread in various ways, on the basis of retaining the malicious character of traditional computer network. By combining social engineering technology, social network worms have more concealment, seduction, longer life cycle and more complex modes of transmission. In recent years, more and more researchers have paid attention to the security of social network worms. In this case, this paper summarizes the current domestic and international research on traditional network worms, social network worms and their related problems. This paper explains the importance of the social network worm 'propagation model in the social network security, compares and analyzes the characteristics of the infectious disease transmission model and the advanced transmission model, and finally puts forward a worm propagation model based on the social network. In this paper, the importance of social network worm detection technology is explained, the 'classification of several detection techniques is put forward, and the characteristics and application of various detection techniques are analyzed in depth, and the performance index of social network worm is put forward. In order to better evaluate the social network worm detection technology, a social network worm detection technology based on security level model is proposed, and the detection method and the design of each module are described.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2013
【分类号】：TP393.08
本文编号：2265554
[Abstract]:In recent years, network worms have become a major problem in computer network security. A web worm is a separate piece of malicious code capable of self-replication and propagation. Although the cost of traditional network worm writing is simple, its self-propagation, malicious outsourcing ability, rapid diffusion speed, can cover a large number of hosts in the network in a short time, deplete the network resources, and cause huge economic losses. Once a large number of network worms spread resulting in network paralysis, recovery will also take a lot of time and resources. After portal, search engine, social network has become the third wave of the global Internet business model, which has great commercial value. Social network worm (hereafter referred to as "social network worm") is a kind of worm that uses social engineering to tempt users to click and spread in various ways, on the basis of retaining the malicious character of traditional computer network. By combining social engineering technology, social network worms have more concealment, seduction, longer life cycle and more complex modes of transmission. In recent years, more and more researchers have paid attention to the security of social network worms. In this case, this paper summarizes the current domestic and international research on traditional network worms, social network worms and their related problems. This paper explains the importance of the social network worm 'propagation model in the social network security, compares and analyzes the characteristics of the infectious disease transmission model and the advanced transmission model, and finally puts forward a worm propagation model based on the social network. In this paper, the importance of social network worm detection technology is explained, the 'classification of several detection techniques is put forward, and the characteristics and application of various detection techniques are analyzed in depth, and the performance index of social network worm is put forward. In order to better evaluate the social network worm detection technology, a social network worm detection technology based on security level model is proposed, and the detection method and the design of each module are described.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2013
【分类号】：TP393.08
【参考文献】
相关期刊论文 前2条
1 孙鑫;刘衍珩;朱建启;李飞鹏;;社交网络蠕虫仿真建模研究[J];计算机学报;2011年07期
2 FAHIM A.M;SALEM A.M;TORKEY F.A;RAMADAN M.A;;An efficient enhanced k-means clustering algorithm[J];Journal of Zhejiang University Science A(Science in Engineering);2006年10期
，本文编号：2265554
本文链接：https://www.wllwen.com/kejilunwen/sousuoyinqinglunwen/2265554.html
