Abstract: The newly developed botnet defense technologies pose a severe challenge to botnet survivability. In order to improve the survivability of the botnet, from an attackers perspective, this article proposed a new anti-strike mechanism based on regroup, which was suitable for semi-distributed botnet. In the case that semi-distributed botnet suffered a severe blow, which caused topology broken, this mechanism could perceive the state of botnet, detect survival nodes, recover survival node and reassemble them into a new botnet. The experiments verify the effectiveness of the mechanism to effectively enhance the survivability of the semi-distributed botnet.

Key words: semi-distributed, botnet, survivability, regroup, anti-strike

摘要： 僵尸网络防御技术的不断涌现对僵尸网络生存能力提出了严峻的挑战,为了改善僵尸网络的生存能力,从攻击者角度提出一种适用于半分布式僵尸网络的基于重组的抗打击技术。通过对僵尸网络生存状态的感知和对存活节点的探查,实现了半分布式僵尸网络在遭受严重打击导致拓扑结构破碎情况下,寻回存活节点并将其重组为新的僵尸网络。通过实验验证了该技术的有效性,证明其能够有效增强半分布式僵尸网络的生存能力

关键词: 半分布式, 僵尸网络, 生存能力, 重组, 抗打击