Modeling and Evaluating a Cross-Realm Architecture for P2P Botnet

TUO Yu-peng; ZHANG Yong-zheng; YIN Tao

doi:10.3969/j.issn.0372-2112.2018.04.004

您当前的位置：

首页 >

文章列表页 >

Modeling and Evaluating a Cross-Realm Architecture for P2P Botnet

更新时间：2025-07-16

- Modeling and Evaluating a Cross-Realm Architecture for P2P Botnet
- Acta Electronica Sinica Vol. 46, Issue 4, Pages: 791-796(2018)
- 作者机构：
  
  1. 中国科学院信息工程研究所,北京,100093
  2. 中国科学院大学网络空间安全学院,北京,100049
  3. 中国科学院信息工程研究所,北京,100093
  4. 中国科学院大学网络空间安全学院,北京,100049
- 作者简介：
- 基金信息：
  
  National Natural Science Foundation of China (No.61572496)
- DOI：10.3969/j.issn.0372-2112.2018.04.004
  CLC： TP393.08
- Published Online：25 April 2018，
  
  Published：2018
- 稿件说明：
移动端阅览
TUO Yu-peng, ZHANG Yong-zheng, YIN Tao. Modeling and Evaluating a Cross-Realm Architecture for P2P Botnet[J]. Acta Electronica Sinica, 2018, 46(4): 791-796.
DOI：

TUO Yu-peng, ZHANG Yong-zheng, YIN Tao. Modeling and Evaluating a Cross-Realm Architecture for P2P Botnet[J]. Acta Electronica Sinica, 2018, 46(4): 791-796. DOI： 10.3969/j.issn.0372-2112.2018.04.004.

摘要

针对现有P2P僵尸网络抗追踪性较差的问题，提出了一种P2P僵尸网络跨域体系结构（CRA）.CRA将僵尸主机间的通信严格限制在不同的域之间，并引入IP伪造技术隐藏通信的源IP.考虑到监控全球互联网的不可行性以及IP溯源的困难性，现实中防御者将很难对CRA展开追踪.模拟实验结果表明，较之当前主流的P2P僵尸网络体系结构，CRA具备更好的抗追踪性和鲁棒性.

Abstract

To construct a tracking-resistant P2P botnet

a Cross-Realm Architecture (CRA) was proposed. CRA strictly restricts bots' interactions across different realms and hides the origins of bots' interactions by IP spoofing. Considering the infeasibility of monitoring the global Internet and the difficulty of IP traceback

it is very hard for defenders to track CRA in the real world. The simulation results show that compared to recent popular P2P botnet architectures

CRA has better anti-tracking performance and robustness.

关键词

Keywords

references

Views

256

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Internet Architecture Research and Reflections

A Multi-Protocol Botnet Detection Method for IoT

Design and Implementation of Embedded Multiple-ISA Processor Based on RISC-V

The p2p Botnet Online Detect Approach Research

P2P-Based Super Botnet:Threats and Defenses

Related Author

REN Feng-yuan

YANG Hong-yu

WANG Ze-lin

ZHANG Liang

CHENG Xiang

HUANG Li-bo

CUI Yi-jun

MA Sheng

Related Institution

Department of Computer Science and Technology， Tsinghua University

Jiangsu Engineering Research Center for Knowledge Management and Intelligent Service

School of Information Engineering， Yangzhou University

School of Information， The University of Arizona

School of Safety Science and Engineering， Civil Aviation University of China

⁰