摘要
分析了蠕虫病毒的主要特征。介绍了两种主要的网络流技术NetFlow和sFlow的优缺点以及在蠕虫病毒侦测中的应用方式，设计实现了一套兼容两种技术的Intranet蠕虫病毒快速侦测系统，重点介绍了蠕虫病毒侦测系统的系统结构和主要关键技术。
In this paper the features ofintemet worms are analyzed. The advantages and disadvantages of two main network floow technologies -NetFlow and sFlow are introduced. A worm detection system for intranet based on NetFlow and sFlow technologies is designed. The system structure and its key technologies are detailed.
出处
《电脑知识与技术》
2006年第7期72-73,共2页
Computer Knowledge and Technology
关键词
流
内部网
采样
扫描
flow
intranet
sampling
scan
