Gnutella Network Worm Propagation Strategy And Defense Technology Research

After more than10years, the Gnutella network developed into a large P2Pnetwork of one million users. The main purpose of this article is to propose thenetwork worm propagation strategy, to point out the potential hazards, and put forwarda defense strategy. In this article,we deeply analyse a Servent how to paticipate intoGnutella network through the GWebCache mechanism.Then a propagation strategycalled GWebCache propagation based on the mechanism is proposed. We get tomodel,simulate the strategy and propose several prevention strategies. The innovativework of the paper include the following aspects:In the thesis,We get two rules to evaluate the effect of a propagation strategythrough analysis a topology worm and hit list worm. Then we study the initializationprocess of GWebCache. As a result,we propose the GWebCache propatation strategybased on GWebCache mechanism,and present a improvement program. In thisarticle,we propose two methods about GWebCache propagation strategy:the bread firststrategy and the depth first strategy. we make several reasonable assumptions on theGnutella network and get two target from the model. In order to achieve the desiredeffect,we only discuss the Minimum number of Servents a breadth first worm need toinfect at his first hop,of which the total number is limited;and the Minimum number ofhops a depth first worm infect most of the network,when the number of Servent infectdat its firt hop is limited.In this thesis,we make some PeerSim and Matlab simulations about the twostrategies,and get some conclutions. The effect of the bread first strategy depend on thesize of network, number the initial worm require the GWebCache,the number ofServents responded by GWebCache. The effect of the bread first strategy only dependon the value of TTL,but the number of Servents responded by GWebCache and the rateof suspected servent will change the minimum value of TTL. The number of suspectedServent has no effect on both strategy.In this thesis,we analyzes the GWebCache worm propagation process, found thatthe outbreak will lead to a exception lots of supernode get offline.we propose a method to detect the exception.we can set a threshold to detect the worm,and use the methodsproposed in the article to contain its propagetion spread.We suggest to reducing thescale of supernode network. At last we simulate the containments,and give somesuggestions if deplaying the containments.