论文部分内容阅读
移动僵尸网络进行恶意扣费、泄露隐私信息等恶意行为,给移动用户构成了巨大隐患.通过构建实用的移动僵尸网络,可以更好地了解其工作机制,从而提出直接有效的防御策略.提出结合短信(SMS)和HTTP协议作为移动僵尸网络的命令与控制(Command and Control,C&C)的通信信道的设计方法,设计了一种移动僵尸程序HybirdBot.在减少消耗的同时确保命令信息能准确接收和高效执行,又能将僵尸网络流量隐藏在其他良性的HTTP流量中.实验结果表明,HybirdBot命令执行时间基本控制在1s以内,运行时CPU占用率只达1-2%,平均每条命令所产的流量也只有0.62kb.证明该移动僵尸网络具有高效性,隐匿性好而且消耗少,最后本文还提出了几种防御策略.
It is a huge risk to mobile users to move the botnet maliciously deducting charges and disclosing private information, etc. By constructing a practical mobile botnet, we can get a better understanding of its working mechanism and put forward a direct and effective defense strategy. SMS and HTTP protocol as the design method of the communication channel of Command and Control (C & C) in mobile botnet, a mobile bot called HybirdBot is designed to ensure that the command information can be accurately received and Efficient implementation, but also the botnet traffic hidden in other benign HTTP traffic.Experimental results show that, HybirdBot command execution time control within 1s, run-time CPU utilization rate of only 1-2%, the average of each command Of the traffic is only 0.62kb. Proved that the mobile botnet with high efficiency, good occult and consume less, and finally this article also proposed several defensive strategies.