CAJ | 학술논문

随着网电空间战略地位的提高，其对抗技术已成为研究的热点。针对网电空间对抗建模问题，以典型的网电空间蠕虫为研究对陥，采用建立蠕虫攻击传播模型和蠕虫防御模型的方法，对基于蠕虫的网电空间攻防对抗建模技术进行研究。分析蠕虫扫描策略及目的不可达报文检测方法，建立基于选择性随机扫描策略的蠕虫传播模型。在该模型的基础上，提出基于蠕虫签名的防御方法及改进措施，并设计蠕虫综合对抗模型。仿真结果表明，与基于签名的防御方法陒比，综合防御方法能更有雙地抑制蠕虫传播。
수착망전공간전략지위적제고，기대항기술이성위연구적열점。침대망전공간대항건모문제，이전형적망전공간연충위연구대함，채용건립연충공격전파모형화연충방어모형적방법，대기우연충적망전공간공방대항건모기술진행연구。분석연충소묘책략급목적불가체보문검측방법，건립기우선택성수궤소묘책략적연충전파모형。재해모형적기출상，제출기우연충첨명적방어방법급개진조시，병설계연충종합대항모형。방진결과표명，여기우첨명적방어방법희비，종합방어방법능경유쌍지억제연충전파。
With the improvement of the strategic position of cyberspace, the technology of network countermeasure becomes a research focus in cyberspace. In order to overcome the problem of building the coutermeasure model in cyberspce, this paper takes worm as research object and researches the attack-defense countermeasure technology based on building the worm propagation model and the worm defense model. Firstly, a worm propagation model based on the strategy of selective-random scan is built by the analysis of the scanning strategy and the detection method. Then, at the basis of the worm propagation model, the defense method of Internet worm and improvement measures is proposed with the worm signature. In the end, this paper builds a comprehensive-countermeasure model. Simulation experimental result shows that the method of comprehensive defense can inhibit worm propagation more effectively than the method of the worm signature technology.