智能化FFSN网络检测方法研究与应用

目前,僵尸网络（Botnet）已成为影响网络安全的重大威胁.为了提高僵尸网络的存活率,网络攻击者利用速变网络服务（Fast-Flux Service Network,FFSN）技术来隐藏其真实攻击主机的网络位置.本研究开发一套智能化恶意网络检测技术,可针对速变网络服务技术找出新的检测特征值进行检测与追踪,并利用智能化算法在可接受的时间复杂度下找出恶意网络检测技术的最优检测策略.实验数据显示,本检测技术可有效减少检测时长,对于各类型网络检测都有较高的正确率.

Research and Application of Intelligent Botnet Detection Method

At present, the Botnet have become a maior threat to network security. In order to improve the survival rates of the Botnet, hackers often use Fast-Flux Service Network technology to hide its network location. This study had developed a set of intelligent malicious network detection technology, for Fast-Flux Network Service to find the detection characteristics of new values, optimal detection strategies and to identify malicious web detection technology used in algorithm. The experimental data showed that the method can reduce the detection, delay time and has a high correct rate for each type of network detection.