Research On Modle Of Worm Propagation Under Unstructured P2P Network And It's Simulation Analysis

The popularity of peer-to-peer (P2P) networks makes them an attractive target to the creators of worms. Recently, the network must face a new trend in worm design: peer-to-peer worms. P2P worm is a worm that makes use of a P2P system to spread from one machine to another, and propagates more furtively and accurately. Thus the researches on the discipline of propagation and the defense technology about P2P worm are needed, and these researches become the hot point in the security field. Among these researches, P2P worm propagation is very important aspect. Based on the research of P2P worm modeling, the discipline of worm propagation can be proposed, and the study of possible mitigation mechanisms can be improved. In this thesis, the P2P worm's behaviors are analyzed by simulating the P2P worm's propagation. The major works involved are as follows:Firstly, the characteristics of P2P worm are analyzed, and a simple framework for simulating worm's propagation is proposed. In this framework, the topology of network is abstracted selectively and separated into two parts: macroscopical and microcosmic part. It combines packet-level simulations with analytical methodology, in order to avoid the problems caused by that the granularity of simulation is coarse or too small.Secondly, the methods of simulating the UP2P (Unstructured P2P) worm that propagates in the unstructured P2P networks are analyzed, and the UP2PWS system which simulates the propagation of the UP2P worm is designed and implemented. The design ideas are: the simulation of propagation in the macroscopical part is realized by building the mathematical model, the simulation of worm propagation in, the microcosmic part is realized by simulating the network activities produced by worms, and a popular unstructured P2P system, Gnutella, which the UP2P worm spreads in, is simulated in packet level. The framework and the workflow of the system are proposed. The techniques about simulating the propagation of UP2P worm both in macroscopical and microcosmic part are discussed in detail. At last, based on the UP2PWSim, the simulation experiment about UP2P worms is done, and the effects of the experiment in different conditions are examined in detail. The main factors which influence the worm are analyzed based on the data. The results illustrate that the worm propagation models and the experiment environment are valid and effective, and the experiment data and scenario are also valuable for the study of worm propagation.