一种基于Gossip协议的分布式协作僵尸网络检测方法
A Distributed and Cooperative Approach to Botnet Detection Using Gossip Protocol
摘要：
近年来，僵尸网络对企业网构成了重大威胁。由于僵尸网络运行方式的分布式性质，企业面临的问题变得尖锐。机器人是一种程序，它作为用户的代理，在互联网上运行自动化任务，其速度远远高于人类单独运行的速度。网络中用于恶意目的的僵尸程序集合称为僵尸网络。在本文中，我们提出了一个分布式的，合作的方法来检测僵尸网络是一个给定的网络，这是受到八卦协议的启发。给定网络中的每个节点都运行一个独立的代理，该代理定期计算该节点的可疑值。网络中的每个节点以规则的间隔与网络中的每个其他节点交换其怀疑值。流言协议的使用确保了如果网络中的一个节点受到危害，网络中的所有其他节点都会尽快得到通知。每个节点还确保在任何情况下，通过流言协议，它保持网络中所有其他节点的最新怀疑值。
英文摘要：
Bots, in recent times, have posed a major threat to enterprise networks. With the distributed nature of the way in which botnets operate, the problems faced by enterprises have become acute. A bot is a program that operates as an agent for a user and runs automated tasks over the internet, at a much higher rate than would be possible for a human alone. A collection of bots in a network, used for malicious purposes, is referred to as a botnet. In this paper we suggested a distributed, co-operative approach towards detecting botnets is a given network which is inspired by the gossip protocol. Each node in a given network runs a standalone agent that computes a suspicion value for that node after regular intervals. Each node in the network exchanges its suspicion values with every other node in the network at regular intervals. The use of gossip protocol ensures that if a node in the network is compromised, all other nodes in the network are informed about it as soon as possible. Each node also ensures that at any instance, by means of the gossip protocol, it maintains the latest suspicion values of all the other nodes in the network.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
