万巍, 李俊. 隐马尔可夫模型在P2P僵尸网络检测中的应用[J]. 微电子学与计算机, 2012, 29(10): 14-17.
引用本文: 万巍, 李俊. 隐马尔可夫模型在P2P僵尸网络检测中的应用[J]. 微电子学与计算机, 2012, 29(10): 14-17.
WAN Wei, LI Jun. Application of Hidden Markov Model in P2P Botnet Detection[J]. Microelectronics & Computer, 2012, 29(10): 14-17.
Citation: WAN Wei, LI Jun. Application of Hidden Markov Model in P2P Botnet Detection[J]. Microelectronics & Computer, 2012, 29(10): 14-17.

隐马尔可夫模型在P2P僵尸网络检测中的应用

Application of Hidden Markov Model in P2P Botnet Detection

  • 摘要: 针对P2P僵尸网络的特点,将隐马尔可夫模型应用于P2P僵尸网络检测技术中.首先根据当前僵尸网络的发展状况及存在的问题分析了P2P僵尸网络的生命周期和行为特征;然后对僵尸主机的状态划分采用隐马尔可夫模型对P2P僵尸网络进行数学建模,并提出一种P2P僵尸网络的检测方法.通过实验,验证了检测方法的可靠性和合理性.

     

    Abstract: In accordance with the feature of P2P botnet, the Hidden Markov Model has application in P2P botnet detection.Firstly, according to the situation and problems of the botnet recently, the life cycle and behavior characteristics of the P2P botnet have been analyzed.After that a mathematical model has been built to describe the P2P botnet with the Hidden Markov Model in state division of the bot.Meanwhile, a method of P2P botnet detection has been proposed.Finally, we analyzed and summarized the experimental results, and verified the reliability and rationality of the detection method.

     

/

返回文章
返回