ISSN 1000-1239 CN 11-1777/TP

计算机研究与发展

所属专题: 2014智慧城市

• 信息安全 • 上一篇    下一篇

基于社区的移动互联网混合蠕虫双向反馈遏制系统

杨海陆 张健沛 杨 静   

  1. (哈尔滨工程大学计算机科学与技术学院 哈尔滨 150001) (yanghailu@hrbeu.edu.cn)
  • 出版日期: 2014-02-15

Community-Based Bidirectional Feedback System for Hybrid Worm Containment in Mobile Internet

Yang Hailu, Zhang Jianpei, and Yang Jing   

  1. (College of Computer Science and Technology, Harbin Engineering University, Harbin 150001)
  • Online: 2014-02-15

摘要: 针对现有的蠕虫遏制方案无法应对移动互联网长短距混合蠕虫攻击这一问题,提出一种基于社区的移动互联网混合蠕虫双向反馈遏制系统.该系统分为社会信息网络(social information networks, SIN)遏制单元和地理信息网络(geographic information networks, GIN)反馈单元2个子系统,SIN遏制单元采用一种在线式社区隔离策略,通过识别社区间的门禁节点并设计相应的蠕虫标签投送算法,将蠕虫遏制在社区内部;GIN反馈单元收集用户的短程通信记录、GPS位置数据以及来自SIN遏制单元提交的历史安全信息,实现对节点的信任性评估,通过将结果反馈到SIN遏制单元,限制社区内部节点的下一步通信决定,从而降低蠕虫在社区内部的传播速度,实现了SIN遏制单元和GIN反馈单元的双向循环.最后通过仿真实验验证了所提方法的可行性和有效性.

关键词: 移动互联网, 混合蠕虫遏制, 蠕虫建模, 社区隔离策略, 信任性评估

Abstract: Aiming at the problem that the existing worm containment methods can’t reply the mobile Internet worm attack which mixes long-range and short-range attack, this paper proposes a mobile Internet mixed worm bidirectional feedback and containment system based on community. The system consists of SIN (social information networks) containment unit and GIN (geographic information networks) feedback unit. The SIN containment unit is a type of online community quarantine strategy, which contains worms within the community by identifying the access nodes between communities and designing the corresponding worm label delivery algorithm. The GIN feedback unit collects the users’ short range communication records, GPS location data and the historical security information committed by SIN to realize the trust-assessment. Through feeding back the results to SIN containment unit, the GIN limits the next communication decisions of community internal nodes, accordingly reduces the spreading speed of worms inside the community and realizes the bi-directional loop between the SIN containment unit and GIN feedback unit. Simulation experiments have proved that the method proposed by this paper has feasibility and effectiveness.

Key words: mobile Internet, hybrid worm containment, worm modeling, community quarantine strategy, trust assessment