Conficker蠕虫传播模型

"飞客"(conficker)蠕虫病毒是近期在全球爆发的以微软的windows操作系统为攻击目标的计算机蠕虫病毒,从爆发至今,感染数量巨大,形成了巨大规模的僵尸网络,对互联网安全形成了巨大的威胁.采用域名重定向技术监测conficker蠕虫的扩散传播,针对其查杀率低,传播周期长的特点,考虑地域、连通性等因素所导致的感染主机传播能力的差异,建立conficker蠕虫传播模型,最后通过真实的conficker蠕虫监测数据验证了模型的有效性.

Propagation Model for Conficker Worm

Conficker is a worm outbreak recently and attack Microsoft's windows operating system.So far,it has infected a large number of computers,which form a large botnet and became a huge threat to the security of the internet.In this paper,the redirect technology of domain name is used to monitor the conficker worm.For it's low killing rate and longterm period of propagation,we build a propagation model for conficker worm which take into account the geography,connectivity and other factors cause difference in propagation capacity of computer,and finally verify the validity of the model with the real monitoring data.