具有permutation扫描特征的多态蠕虫传播实验仿真*

大部分蠕虫建模工作都是基于相对简单的随机扫描蠕虫，而且蠕虫的形态是相对固定的。随着蠕虫技术的显著提高，在传播方式上出现了较高级的传播方式如permutation扫描，同时出现了能改变蠕虫形态的多态变形技术。为了更好地理解该类型蠕虫的传播特性，首先研究permutation扫描技术，然后构建实验模拟具有permutation扫描特性的多态蠕虫传播。分析当环境中不存在IDS时，各类蠕虫数目和被感染主机的运行情况，当环境中存在IDS时，各参数对多态蠕虫传播过程的影响。最后在仿真的基础上对蠕虫传播的动力学机制进行了总结，对防御方法进行了初步探讨。

Experimental simulation of polymorphic worm propagation with permutation-scanning characteristic

Most of models are based on single random scanning,and worm has relatively fixed morphology.With the improvement of worm technique,complicate propagation like permutation scanning and polymorphic technique emerge.To comprehend well propagation characteristics of polymorphic worm with permutation scanning,this paper did some research on permutation scanning technique.Then constructed experimental to simulate propagation of polymorphic worm with permutation scanning.It analyzed the number of different worm ty...