以GUI介面自動化建構殭屍網路測試環境與實驗執行

Using GUI Interface to Construct Automatically Botnet Testing Environment and Experiment Performing

莫淇鈞(Chi-Jyun Mo)

指導教授 ： 田筱榮

中原大學/工學院/資訊工程研究所/碩士(2013年)

https://doi.org/10.6840/cycu201301065

摘要

殭屍網路攻擊是網路安全的一大威脅。為了能夠有效地防止殭屍網路的攻擊，研究殭屍網路的攻擊並發展防禦機制是研究人員持續努力的目標，但要能夠建立一個擬真的實驗環境並且設定環境及實驗參數是非常不容易的，本研究目的是提供一個圖形化使用者介面的控制工具，讓使用者可利用此工具在佈署實驗環境及操作實驗環境下的電腦均能夠在此介面下完成，並且能將欲測試的病毒樣本或惡意檔案加入此介面並傳送到實驗環境電腦執行，提高使用者在建立實驗環境的自由度及減少設置實驗環境的困難，最後設立實驗數據的回傳機制，讓使用者可確實回收實驗所產生的資料。

關鍵字

殭屍網路 ； GUI ； 測試環境

並列摘要

Botnet attack is one of the major threats to network security. In order to prevent botnet attacks effectively, extensive efforts are devoted to the development of botnet attack prevention mechanisms. One of the difficulties faced in such endeavor is in establishing a testing environment for studying possible defense mechanism. In this study, we provide a tool with graphical user interface to allow easy deployment of experiments starting from establishing testing environment, to the control of computers to perform the designated roles according to the experiment plan including the executions of virus samples or malicious files so that the complexity of botnet attack experiments can be significantly reduced. The proposed tool also have a feedback mechanism to facilitate test result collection.

並列關鍵字

Testing Environment ； Botnet ； GUI

參考文獻

[11] 陳彥甫，“殭屍網路測試自動化環境架設與實驗執行”，中原大學資訊工程學系研究所，碩士學位論文，中華民國一百年七月。

[5] Chang S., Zhang L., Guan Y. and Daniels T.E. “A Framework for P2P Botnets.”In Communications and Mobile Computing, 2009(CMC'09), WRI International Conference on Volume.3, pp. 594-599, IEEE., January 6-8, 2009, Kunming, Yunan, China

[7] Zhang J., Xie Y., Yu F., Soukal D., and Lee W. “Intention and Origination: An Inside Look at Large-Scale Bot Queries.”, In Proceedings of the 20th Annual Network and Distributed System Security Symposium(NDSS 2013), February 24-27, 2013, San Diego, US.

參考文獻

[1] Barford P., Yegneswaran V., “An Inside Look at Botnets.” In Malware Detection. Springer US, 2007, pp. 171-191