Network worm active hampering method based on driver checking and confronting tool automatic generation system

Abstract

A network worm active hampering method based on driver checking and a confronting tool automatic generation system relate to the field of network security. The method and the system are used for improving the response speed to new worms, timely hampering spread of infection sources, eliminating the worms and the leaks of uncontrollable nodes and thoroughly eliminating the worms. The method is technically characterized by comprising performing packet capture detection by arranging a probe at the outlet of a network; when finding the infected host of worms, entering the infected target host through leaks and taking measures of searching and killing the worms, mending the leaks, immunizing the host and the like to achieve the aim of eliminating the network worms; meanwhile, scanning the host inside the network through a quick scan technology to achieve remote mending of existing leaks. The confronting too automatic generation system comprises a remote network worm eliminating tool analysis and automatic generation subsystem, a delivery tool analysis and automatic generation subsystem and an active mending patch analysis and automatic generation subsystem. The network worm active hampering method based on driver checking and the confronting tool automatic generation system can achieve a response speed to effectively hamper the worms in the spreading initial period of the worms.

Description

technical field [0001] The invention relates to the field of network security, more specifically, to the technology of clearing and containing network worms. Background technique [0002] Due to the complex security situation brought about by the open and free Internet, worms are still harmful to the Internet. The main reason why network worms are difficult to control is that the Internet is essentially an open and complex giant system with a complex structure, lack of central control capabilities and Its openness leads to the existence of a large number of uncontrollable nodes on the network management level. These uncontrollable nodes often lack corresponding security protection measures or are left unmanaged for a long time. Once infected with worms, the worms will stay in the infected nodes for a long time and always pose a threat to the Internet as an attack source. Therefore, how to manage and maintain those disordered and uncontrollable network nodes is the key to co...

AI Technical Summary

Problems solved by technology

[0003] At present, network worms are extremely harmful to the Internet. After the

Images