Network Worm And Its Defense Technology Research

Since the serious threats of Internet security, the study of worms becomes one of the most emergent and active research topic in the field of network security. P2P based applications become the dominant networking traffic in recent years. However, existing researches on P2P worms lag far behind demand. Most of those defensive schemes were based on the traditional Internet worms defensive approaches and did not consider the characteristics of peer to peer networks. In this thesis, a comprehensive research on P2P worms was made by analyzing the Internet worms as well as considering the P2P network traits. The main contents are given as the follows:First, the definition and the classification of P2P worms was given. The state of P2P worm research addressed as well.Then, according to the non-scanning feature, the tremendous security threat of P2P worms was expounded. And a light-weight defending strategy RAWBDP which uses the reactive anti-worms as the carrier is proposed.A RAWBDP based defensive model for proactive worms was proposed, and a full simulation of the model was given. The primary experimental results indicated that our anti-worm based defensive scheme for P2P worm has the features of fast convergence, low overload of networking resource, and high adaptability.Some potential applications of anti-warm in P2P networks, such as defending against worm and virus, automatic patching, monitoring networking states, and recommending resources are addressed.