计算机工程与应用
計算機工程與應用
계산궤공정여응용
COMPUTER ENGINEERING AND APPLICATIONS
2009年
22期
14-17,20
,共5页
IPv4/IPv6%网络蠕虫%网络地址转换(NAT)%蠕虫扫描策略
IPv4/IPv6%網絡蠕蟲%網絡地阯轉換(NAT)%蠕蟲掃描策略
IPv4/IPv6%망락연충%망락지지전환(NAT)%연충소묘책략
IPv4/IPv6%Intemet worm%Network Address Transiation(NAT)%worm scanning strategy
首先在存在大量NAT的混合型(IPv4/IPv6)网络环境中分析了网络蠕虫的扫描策略,构建了一种新型的基于Teredo服务的网络蠕虫-TeredoWorm,该蠕虫应用分层扫描策略为在本地应用子网内扫描策略;在子网间应用基于Teredo服务的扫描策略.并在此基础上建立了一种分层蠕虫传播模型(Layered Model,IM).经仿真实验结果表明,TeredoWorm是一种可以在IPv4/IPv6网络中穿越NAT进行大范围传播的蠕虫,其将对IPv4/IPv6网络的安全性带来巨大的威胁.
首先在存在大量NAT的混閤型(IPv4/IPv6)網絡環境中分析瞭網絡蠕蟲的掃描策略,構建瞭一種新型的基于Teredo服務的網絡蠕蟲-TeredoWorm,該蠕蟲應用分層掃描策略為在本地應用子網內掃描策略;在子網間應用基于Teredo服務的掃描策略.併在此基礎上建立瞭一種分層蠕蟲傳播模型(Layered Model,IM).經倣真實驗結果錶明,TeredoWorm是一種可以在IPv4/IPv6網絡中穿越NAT進行大範圍傳播的蠕蟲,其將對IPv4/IPv6網絡的安全性帶來巨大的威脅.
수선재존재대량NAT적혼합형(IPv4/IPv6)망락배경중분석료망락연충적소묘책략,구건료일충신형적기우Teredo복무적망락연충-TeredoWorm,해연충응용분층소묘책략위재본지응용자망내소묘책략;재자망간응용기우Teredo복무적소묘책략.병재차기출상건립료일충분층연충전파모형(Layered Model,IM).경방진실험결과표명,TeredoWorm시일충가이재IPv4/IPv6망락중천월NAT진행대범위전파적연충,기장대IPv4/IPv6망락적안전성대래거대적위협.
In this paper,the scanning strategy of Internet worm In hybrid(IPv4/IPv6) network environment which existing a large number of NAT are first analyzed.A new type of worm,TeredoWorm based on Teredo service is built.This worm applies two different layers scanning strategy.It means that the worm apply subnet scanning strategy in local subnet and apply scanning strategy based on Teredo service in inter-subnet.Based on the Layered scanning strategy,a Layered Model(LM) is presented.The results of simulation experiment show that TeredoWorm is a worm that can propagate fasdy in the large-scale inIPv4/IPv6 network,at the same time this paper predicts a enormous threat posed by the new worm in hybrid network.