Analyzing worm ’ s scanning stage , we find that worm ’ s spreading speed is closely related to network scale . the sem is aimed and analyzed deep , based on the model analysis , we do the quarantine work by dividing a large - scale network and perform the quarantine on the border 并以sem ( simpleepidemicmodel )模型为主要对象,对模型进行了深入研究,在此基础上,提出了对网络进行分割以减小网络规模,在划分边界上对蠕虫进行隔离,从而在大规模网络上有效的抑制蠕虫的传播。
The paper introduces the definition of worm according to the history of worm , analyses the worm ’ s function module , attacking mode , scanning regulation and the typical worm - sasser , then brings forward a worm - detecting algorithm based on packet statistics , by analyzing the detecting algorithm in existence 本文结合蠕虫发展的历史提出了蠕虫的定义,分析了蠕虫的功能结构,攻击手段,扫描策略,并对sasser蠕虫进行了剖析。简述了现有的蠕虫检测算法,并分析了其优缺点,提出了基于数据包统计的蠕虫检测算法。
