Propagation And Defense Of The Network Worm

With the wide application of the Internet, worm's threat to security of computer system and security of network increases day by day. Especially under the environment of network, the diversified spread ways and the complicated applied environment make the emergence frequency of the network worm increase, the propagation becomes faster, and the coverage rate is wider. The frequent breakouts of worm result in tremendous economic destruction, but traditional anti-virus technologies cannot quarantine the propagation of Internet worm effectively. Former researches on worm lagged far behind demand and most of them centralized on de-infection and description of some special Internet worms, and full-scale researches on network worm were absence. In this dissertation, we make a comprehensive research on Internet worm, and try to contribute the propagation and defense of the network worm.This article is a research thesis to the network worm. The first half a part has carried on deeper research to various kinds of scanning statics of the network worm, the the propagation mechanism of the worm and so on. Aim at the buffer overflow, which was used in attack of worm freqentlly, we research a new method of unexecute buffer to solve this problem. Aim at the defense of worms in enterprise, we have designed each a system model, analysize the data stream to detect the worms, insulate the infected computer...