國立高雄大學圖資館 |

Language: English

Back

以SIR傳染模型探討BotNet擴散模式與網路防禦管理策略效能分析之研究...

國立高雄大學資訊管理學系碩士班

以SIR傳染模型探討BotNet擴散模式與網路防禦管理策略效能分析之研究 = A Study of BotNet Diffusion Model and Effective Analysis of Network Prevention Management Strategies Using SIR Model

Record Type:	Language materials, printed : monographic
Paralel Title:	A Study of BotNet Diffusion Model and Effective Analysis of Network Prevention Management Strategies Using SIR Model
Author:	陳坤裕,
Secondary Intellectual Responsibility:	國立高雄大學
Place of Publication:	[高雄市]
Published:	撰者;
Year of Publication:	2012[民101]
Description:	75面圖，表格 : 30公分;
Subject:	SIR 擴散模型
Subject:	SIR Propagation model
Online resource:	http://ethesys.nuk.edu.tw/ETD-db/ETD-search-c/view_etd?URN=etd-0508112-173323
Summary:	資訊科技之快速發展，使電腦網路在現今社會中，普及程度不斷上升。然而，電腦病毒等網路威脅也透過電腦網路對人類產生了危害。近年來，更有網路蠕蟲、木馬與自動代理人技術之結合而產生的BotNet攻擊技術。其所帶來之危害則更加劇烈。不僅造成個人隱私資料被竊取，甚至企業與政府單位所提供之網路服務也被阻斷。因此對於網路與系統管理者而言，如何透過防禦策略來降低BotNet之擴散及危害，是個值得重視的問題。然而，在眾多防禦BotNet之策略中。哪一策略能有較好之防禦效能，對於防禦者而言，之前的研究似乎沒有一個較可靠的參考依據。為此，本研究從防禦生物傳染病的角度進行類比。挑選出屏障防範(Barrier Precaution)策略以及安裝修補程式(Patching)策略來進行防禦策略效能之比較。透過數學模型的建立與模擬實驗之結果，我們發現，安裝修補程式策略的表現優於屏障防範策略。此外，在導入時間上，我們也發現越早導入安裝修補程式策略，對於整個BotNet之擴散將能更早控制到穩定的程度。同時，我們也了解到在使用安裝修補程式策略防禦BotNet時，針對已感染電腦進行修補，將比針對未受感染電腦進行修補更有效。我們的發現，不僅幫助防禦者了解不同防禦策略之防禦效能。同時也提供了在使用單一防禦策略時，將其效用發揮至最大之建議。我們希望本研究會是BotNet 防禦策略數學建模的一個起點。未來在本研究之基礎上，可再考量經濟成本或混和策略至模型中。其將能使防禦者在使用防禦策略時能有更多的參考。 With the rapid growth of Information technology, resources on the Internet can be coordinated in a more efficient and effective way. However, this advantage has its drawback when it is used with criminal purposes. In recent years, a new Internet threat (BotNet) has been created. BotNet incorporates the techniques of Internet worms, Trojans and agents together and brings serious disasters to Internet users. Hence, for defenders, choosing appropriate defense strategies becomes critical while defending BotNet. However, prior researches draw little attention on this question. Therefore, in this research, by describing the analogies of defense strategies between biological diseases and BotNet, two defense strategies are chosen. Through mathematical modeling and simulations, our simulation results show patching strategy performs better than barrier precaution strategy. Further, we also found the earlier the implementation, the earlier the BotNet outbreak approaches to steady state. Meanwhile, we found patch infected hosts performs better than patch susceptible hosts. Our findings not only help defenders to compare the effectiveness of defense strategies but also provide suggestions to maximum the effectiveness of deploy patching strategy. We anticipate our research to be a starting point for more sophisticated in modeling and analyzing the effectiveness of defense strategies against BotNet. For example, take economic perspective or hybrid defense strategies into account. This can help defender to have more references while defending BotNet.

以SIR傳染模型探討BotNet擴散模式與網路防禦管理策略效能分析之研究 = A Study of BotNet Diffusion Model and Effective Analysis of Network Prevention Management Strategies Using SIR Model
陳, 坤裕

以SIR傳染模型探討BotNet擴散模式與網路防禦管理策略效能分析之研究 = A Study of BotNet Diffusion Model and Effective Analysis of Network Prevention Management Strategies Using SIR Model / 陳坤裕撰 - [高雄市] : 撰者, 2012[民101]. - 75面 ; 圖，表格 ; 30公分.
參考書目：面58-64.
SIR 擴散模型SIR Propagation model

以SIR傳染模型探討BotNet擴散模式與網路防禦管理策略效能分析之研究 = A Study of BotNet Diffusion Model and Effective Analysis of Network Prevention Management Strategies Using SIR Model
LDR:04586nam0 2200265 450 001 332234
005 20130926103834.0
010 0 $b 精裝
010 0 $b 平裝
100 $a 20120524d2012 k y0chiy05 e
101 1 $a eng $d chi $d eng
102 $a tw
105 $a ak am 000yy
200 1 $a 以SIR傳染模型探討BotNet擴散模式與網路防禦管理策略效能分析之研究 $d A Study of BotNet Diffusion Model and Effective Analysis of Network Prevention Management Strategies Using SIR Model $z eng $f 陳坤裕撰
210 $a [高雄市] $c 撰者 $d 2012[民101]
215 0 $a 75面 $c 圖，表格 $d 30公分
314 $a 指導教授：蕭漢威博士
320 $a 參考書目：面58-64
328 $a 碩士論文--國立高雄大學資訊管理學系碩士班
330 $a 資訊科技之快速發展，使電腦網路在現今社會中，普及程度不斷上升。然而，電腦病毒等網路威脅也透過電腦網路對人類產生了危害。近年來，更有網路蠕蟲、木馬與自動代理人技術之結合而產生的BotNet攻擊技術。其所帶來之危害則更加劇烈。不僅造成個人隱私資料被竊取，甚至企業與政府單位所提供之網路服務也被阻斷。因此對於網路與系統管理者而言，如何透過防禦策略來降低BotNet之擴散及危害，是個值得重視的問題。然而，在眾多防禦BotNet之策略中。哪一策略能有較好之防禦效能，對於防禦者而言，之前的研究似乎沒有一個較可靠的參考依據。為此，本研究從防禦生物傳染病的角度進行類比。挑選出屏障防範(Barrier Precaution)策略以及安裝修補程式(Patching)策略來進行防禦策略效能之比較。透過數學模型的建立與模擬實驗之結果，我們發現，安裝修補程式策略的表現優於屏障防範策略。此外，在導入時間上，我們也發現越早導入安裝修補程式策略，對於整個BotNet之擴散將能更早控制到穩定的程度。同時，我們也了解到在使用安裝修補程式策略防禦BotNet時，針對已感染電腦進行修補，將比針對未受感染電腦進行修補更有效。我們的發現，不僅幫助防禦者了解不同防禦策略之防禦效能。同時也提供了在使用單一防禦策略時，將其效用發揮至最大之建議。我們希望本研究會是BotNet 防禦策略數學建模的一個起點。未來在本研究之基礎上，可再考量經濟成本或混和策略至模型中。其將能使防禦者在使用防禦策略時能有更多的參考。 With the rapid growth of Information technology, resources on the Internet can be coordinated in a more efficient and effective way. However, this advantage has its drawback when it is used with criminal purposes. In recent years, a new Internet threat (BotNet) has been created. BotNet incorporates the techniques of Internet worms, Trojans and agents together and brings serious disasters to Internet users. Hence, for defenders, choosing appropriate defense strategies becomes critical while defending BotNet. However, prior researches draw little attention on this question. Therefore, in this research, by describing the analogies of defense strategies between biological diseases and BotNet, two defense strategies are chosen. Through mathematical modeling and simulations, our simulation results show patching strategy performs better than barrier precaution strategy. Further, we also found the earlier the implementation, the earlier the BotNet outbreak approaches to steady state. Meanwhile, we found patch infected hosts performs better than patch susceptible hosts. Our findings not only help defenders to compare the effectiveness of defense strategies but also provide suggestions to maximum the effectiveness of deploy patching strategy. We anticipate our research to be a starting point for more sophisticated in modeling and analyzing the effectiveness of defense strategies against BotNet. For example, take economic perspective or hybrid defense strategies into account. This can help defender to have more references while defending BotNet.
510 1 $a A Study of BotNet Diffusion Model and Effective Analysis of Network Prevention Management Strategies Using SIR Model $z eng
610 # 0 $a SIR 擴散模型 $a 網路安全 $a BotNet $a 網路防禦策略
610 # 1 $a SIR Propagation model $a Network Security $a BotNet $a Network Defense Strategy
681 $a 008M/0019 $b 464105 7543 $v 2007年版
700 1 $a 陳 $b 坤裕 $4 撰 $3 554504
712 0 2 $a 國立高雄大學 $b 資訊管理學系碩士班 $3 353936
801 0 $a tw $b NUK $c 20120521 $g CCR
856 7 # $u http://ethesys.nuk.edu.tw/ETD-db/ETD-search-c/view_etd?URN=etd-0508112-173323 $2 http $z PDF全文