| 摘要 |
PURPOSE: A worm spread model simulation method is provided to be used as a benchmark system which confirms efficiency of an existing or new defense technique, thereby comparing and analyzing performance of an intrusion detection monitoring system and a firewall. CONSTITUTION: The number of infection nodes of a current step is obtained. The number of predicted new infection nodes of a next step is calculated based on the number of infection nodes of the current step. An expectation value and an infection probability of an infected node are determined by equations. A processor obtains the number of infection nodes of the current step and calculates the number of predicted new infection nodes of the next step based on the number of infection nodes of the current step. |
