Benign Worm In The Network Self-control Methods Of Research

In recent years, P2P worms have become a serious threat with the popularity of P2P file sharing systems. Compared with traditional worms, P2P worms can propagate quickly exploiting the P2P topology. Moreover, they have the potential to compromise peers in a large scale. To defend against P2P worms remains to be a challenging problem. Schemes that have been proposed are difficult to handle P2P worms, though they can efficiently detect traditional worms. The reason is that P2P worms can blend their traffic into the normal traffic in P2P applications. In order to counter the threat of P2P worms, anti-worms were designed to minimize the worm damage, which can spread themselves using the same mechanism as the malicious worms. Then, they path peers'vulnerabilities and use the infected peers to find other vulnerable peers. Although anti-worms have the ability to spread just as fast as regular worms, they consume a lot of bandwidth. In this thesis, we study the propagation of anti-worms and reduce their overhead by investigating their behaviors and P2P characteristics. The main contributions of this thesis are listed as follows:First, we propose a scheme to speed up the anti-worm propagation by deploying them on the super peers who have high node degree. We also evaluate the performance of the scheme through simulations. The simulation results show that the anti-worms using the deployment scheme can react and propagate quickly.Then, we propose a method to propagate anti-worms in an ordered way. By setting the next targets for anti-worms, we can largely reduce the network traffic caused by the worms, since a worm does not need to scan the peers who have already been scanned. The simulation results indicate that the anti-worms using the propagation scheme is more effectiveness and their propagation is little affected by network parameters.Overall, the deployment and propagation schemes proposed in this thesis can make the anti-worms be practicable.