Early stage prewarning method for Internet worm virus

Abstract

The invention is an Internet worm virus early-precautioning method, and its characteristic: firstly configuring a set of equal network application programs for an equal network composed of private intranet and public Internet user on the basis of existing network management software of each node system of the Internet, then constructing a characteristic data structure containing two parts of automatic synthesis and artificial processing for each node system, and giving information accumulation eigenvalue in the form of properties. Once its node system or network is abnormal, the equal network application program will start cooperative mechanism to transmit precaution information to each node system of the whole Internet in the form of equal network information, so that it adopts conservative behavior; if the information accumulation eigenvalue on the node receiving the information is over the precaution value, it will activate the system to search and filter virus, thus achieving the purpose of precautioning and rapidly blocking worm virus transmission. It meets the requirements for safety, autonomy and early precaution of the whole Internet.

Description

technical field [0001] An early warning method for Internet worms belongs to the field of Internet network and node system security. Background technique [0002] As the way people live and work becomes more and more dependent on the Internet, there is an unprecedented need for network security issues. The early designers of the Internet assumed a friendly operating environment, where all parts of the network would work together to improve performance. This makes the Internet a looser, less secure architecture. The internal operation of the network is relatively simple, and more complex operations are on the edge of the network, and it is believed that the edge is operating correctly. On the one hand, this so-called "end-to-end principle" has indeed played a positive role in the development of the network; The rapid spread of electroviruses provides favorable conditions. In the past few months, the Blaster, Welchia, and Sobig worms that have been rampant in the Internet ...

AI Technical Summary

Problems solved by technology

The first disadvantage is that it is only limited to organizations with a high degree of mutual trust, and the deployment of the entire Internet is not strong; the second disadvantage is that it lacks information processing and synthesis capabilities, and it is often impossible to effectively start blocking actions automatically based on suspicious news

The first disadvantage is that the alarm confirmation will be a problem due to the incomplete and timely information grasp in the whole Internet network; the second disadvantage is that it does not consider that in a changing environment, even if there are multiple alarms that are confirmed, there will still be inconsistencies. , and the ability to process useful information

Images