网络蠕虫研究及进展.pdf

1000-9825/2004/15(08)1208 ©2004 Journal of Software 软 件 学 报 Vol.15, No.8 网络蠕虫研究与进展 1,2,3+ 1,2,3 1,2,3 1,2,3 文伟平 , 卿斯汉 , 蒋建春 , 王业君 1( 中国科学院 软件研究所,北京 100080) 2 ( 中国科学院 信息安全技术工程研究中心,北京 100080) 3( 中国科学院 研究生院,北京 100039) Research and Development of Internet Worms WEN Wei-Ping1,2,3+, QING Si-Han1,2,3, JIANG Jian-Chun1,2,3, WANG Ye-Jun1,2,3 1(Institute of Software, The Chinese Academy of Sciences, Beijing 100080, China) 2(Engineering Research Center for Information Security Technology, The Chinese Academy of Sciences, Beijing 100080, China) 3(Graduate School, The Chinese Academy of Sciences, Beijing 100039, China) + Corresponding author: Phn: +86- 10ext 8014, E-mail: qing1010@ Received 2004-04-22; Accepted 2004-07-06 Wen WP, Qing SH, Jiang JC, Wang YJ . Research and development of Internet worms . Journal of Softw are, 2004,15(8):1208~1219. /1000-9825/15/1208.htm Abstract: With the explosive growth of network applications and complexity, the threat of Internet worms against network security becomes increasingly serious. Especially under the environment of Internet, the variety of the propagation ways and the complexity of the application environment result in worm with much higher frequency of outbreak, much deeper latency and more wider coverage, and Internet worms have been a primary issue faced by malicious code researchers. In this paper, the concept and research situation of Internet worms, exploration function component and execution mechanism are first presented, then the scanning strategies and propagation model are discussed, and finally the critical techniques of Internet worm prevention are given. Some major problems and research trends in this area are also addressed. Key words : network security; Internet worm; function component; scanning strategy; prop