Abstract: In order to make the Botnet propagation modeling is more in line with the spread of the Botnet Internet characteristics. This paper analyzes the propagation characteristics of Botnet based on the SIR mode, considers the network traffic congestion and existing immune host in the process of the spread of bots, puts forward a new propagation modeling of Botnet, and conducts simulation experiment. The results of the software simulation show that the new Botnet propagation modeling is more accord with Internet network characteristics, and makes for the analysis of the Botnet communication behavior and forecasting the trend of spread.

Key words: network security, Botnet, propagation model, network traffic congestion, immunity

摘要： 为了让僵尸网络传播模型是更符合Internet中的僵尸网络的传播特性，基于简单病毒传播模型深入分析僵尸程序的传播特性，考虑了僵尸程序在传播过程中存在的网络流量阻塞、提前免疫主机和感染后免疫主机等因素，提出了一个新的僵尸网络传播模型，并进行了仿真实验。实验结果表明，该模型更符合僵尸程序在复杂网络中的传播特性，有利于僵尸网络的传播行为的分析和传播趋势的预测。

关键词: 网络安全, 僵尸网络, 传播模型, 流量阻塞, 免疫