“飞客”(conficker)蠕虫病毒是近期在全球爆发的以微软的windows操作系统为攻击目标的计算机蠕虫病毒,从爆发至今,感染数量巨大,形成了巨大规模的僵尸网络,对互联网安全形成了巨大的威胁.采用域名重定向技术监测conficker蠕虫的扩散传播,针对其查杀率低,传播周期长的特点,考虑地域、连通性等因素所导致的感染主机传播能力的差异,建立conficker蠕虫传播模型,最后通过真实的conficker蠕虫监测数据验证了模型的有效性. The conficker worm is a computer worm that recently hit the world with Microsoft’s Windows operating system as its target. Since the outbreak, the number of infections has been huge, forming a huge scale botnet that is critical for Internet security The threat of conficker was monitored by using domain name redirection technology. According to the characteristics of low killing rate and long transmission period, considering the difference of transmission capacity of infected hosts caused by geographical factors, connectivity and other factors, the establishment of conficker Worm propagation model, and finally verify the validity of the model by using real conficker worm monitoring data.