摘要
双因素模型考虑了人为对抗因素和蠕虫传播对路由造成的冲击,较SI模型、SIS模型和KM模型更能符合蠕虫传播的实际情况。但它不能反映蠕虫传播后期的特性,同时模型没有考虑大规模系统升级程序和自动补丁程序这一重要的对抗因素对蠕虫传播的影响。针对双因素模型的不足,对其进行了改进,提出了"Update-Factor"模型,经仿真结果与实际监测结果比较,模型克服了双因素模型的不足,更符合蠕虫传播的实际情况。
In two-factor model, the dynamic countermeasures taken by users and the congestion and troubles to some routers caused by worm rampant propagation were considered. Compared with SI model, SIS model and KM model, two-factor model can match the worm＇s post-spreadlng and can describe the worm＇s propagation better, but the model can＇t describe the propagation of worm in it＇s later period, At the same time two-factor model has not considered the affect which the automatic upgrade and large-scale patch programs. Two-factor model w~ improved to overcome these disadvantages. The improved model was named as update-factor model. It is proved that the result matches the worm＇s post-spreadlng, update-factor model also can put up with disadvantages of two-factor model and can describe the worm＇s propagation.
出处
《计算机应用》
CSCD
北大核心
2008年第B06期66-70,共5页
journal of Computer Applications
作者简介
张殿旭（1977-），男（蒙古族），新疆阜康人，工程师，硕士研究生，主要研究方向：网络与信息安全；（paper_7@sina．com．cn）
张怡（1973-），女，四川成都人，副研究员，博士研究生，主要研究方向：网络人侵检测、网络安全预警、高性能网络安全设备软件。
