Research Of A P2p-based Benign Worm

Kinds of active worms have been plunging into the network flows, which makes the Internet security problem more serious. As lots of propagation approaches of Internet worm have appeared in recent years, such as propagation ways by the use of P2P systems in early stage, Internet is forced to face a bigger threat. Worm-anti-worm is a new technique to defend worm, which has lots of advantages such as fast speed, good pertinence and high automatization. But it is ineffective, uncontrollable and unsafe.In this thesis, a new benign worm based on P2P principle is proposed. It can achieve quick self-propagation performance by fragmentation, and control the propagation of worm quickly. At the same time, P2P-based benign worm has the P2Pshell which contains the entire control message. Once the P2Pshell is deleted, the benign worm will be dead. Therefore, P2P-based benign worm can be controlled easily, which is really important for the development of worm's counterwork technology.Some basic principles of Internet worm and P2P-based worm are introduced at the beginning of this thesis. Then the function structure and propagation characters of benign worm are analyzed in detail. After introducing several classical worm propagation models and P2P-based worm propagation model, a new benign worm which uses P2P-based worm as benign worm is proposed. And based on the different interactive conditions between worm and benign worm, four P2P-based benign worm models are proposed. In order to measure the theory of this P2P-based benign worm properly, NS-2 simulation environment is selected to simulate the propagation process between worm and benign worm. Simulation results give a powerful support to the P2P-based benign worm models. Analysis of contrasts between simulation results and numerical results not only proves the correctness of the P2P-based benign worm model, but also show that the model proposed in this thesis has better propagation performance.