Research Of The Propagation And Containment Strategy Of P2P-based Worm In IPv6Internet

With the IPv6times approaching, network security has aroused public concern. It is commonly believed that IPv6protocol can provide good protection against worms due to its128bits address space. However, the fact is incorrect, and recent related studies show that worms are still able to spread in IPv6networks with a "smart" way, and whose propagation present new features. Therefore, traditional research methods and containment strategies are no longer fully applicable. It’s necessary to study new worm propagation and containment strategy.Combining the features of IPv6networks, the structure of P2P networks and worm propagation characteristics, a new "P2P-based worm" which can spread in IPv6networks on top of P2P networks is proposed. It applies a two-stage attack algorithm to infect targets. According to the attack algorithm as well as the modeling idea of dividing the population into "species" in epidemic, the nodes are divided into "species" and "group". In this case, a recursive model based on discrete time is used to construct the worm propagation model. This model can reflect worm propagation dynamics. In addition, A "Neighbor-Alert" containment strategy is proposed to suppress worm propagating. Its main idea is that the infected nodes which have been detected will generate alerts, and these alerts are shared among neighbors to make the nodes become immune as early as possible. In order to prevent the spread of false alerts, the nodes choose to deal with the alert or not on the basis of the trust value, and the calculation method of the trust value is determined according to P2P trust model. Further, the containment model is constructed to reflect the effect of containment strategy on worm propagation.Finally, Based on the theoretical study, the simulation experiment is designed. The results show that the worm can spread in IPv6Internet quickly. The fitting results of numerical and simulation curves are given to verify the correctness of the propagation model and the containment model, as well as the effect of the containment strategy. In addition, the influence of various parameters on suppression effect is also analyzed. The research of worm propagation and containment strategy is of great significance to worm propagation prediction and early warning.