Benign Worm Worm Defense Mechanisms

Worm has been one of the greatest threats to Internet security as an important component of malicious codes. While the network security defense mechanisms continue to improve, worm also continues to improve its own propagation mechanisms and new worms continue to emerge. In recent years, e-mail worm which propagates with the zombie network and P2P worm which propagates in P2P networks have caused a great impact on Internet. The differences in which the two new types of propagation model and environment of e-mail worm and P2P worm compare with the traditional Internet worm result in that traditional worm defense mechanisms can't defend effectively against worm attacks. Through analyzing the characteristics of the Internet worm, considered with the topology characteristics of e-mail and P2P networks, this dissertation uses the benign worm as the major tool to study policies against e-mail worm and P2P worm in depth, main functions include:1. The dissertation analyzes Internet worm, e-mail worm, P2P worm and benign worm in detail and sums up the related research at home and abroad.2. The dissertation presents central defense policy against e-mail worm based on passive benign worm. By making use of power-law characteristic in e-mail networks, the dissertation sets up joint defense system include benign worm, benign worm management server and e-mail server.3. The dissertation presents Automatic Prior Tend to High Quality Nodes (APTHQN) policy against P2P worm based on hybrid benign worm.4. The dissertation makes theory and simulation analysis towards two policies. The results show that the first immunized nodes style, the start-time of immunization, the start-time of e-mail server filtration and the filtration preciseness have great influence on e-mail worm propagation and APTHQN policy has achieved design goal which means the less resources consume, the more effectively defends.