Abstract:Peer-to-Peer (P2P) applications are becoming more prevalent in mobile 3G/4G devices. Categorized as collaborative P2P applications, MSN, ICQ and Yahoo IM are in use for years, while recently, file- sharing P2P applications like Nokia mBit and PeerBox have also been introduced. Contemporary mobile peers are capable of sharing P2P content using Bluetooth technology i.e. bypassing cellular vendor's network altogether. Mobile devices are resource constrained in terms of memory and processing thus security threats like scanning and non-scanning worms could result in choking these resources. 3G/4G mobile devices come equipped with no significant software for detection of such an immense threat and hence, worms could exploit vulnerabilities to cause catastrophes. Worms are capable of propagation through mobile P2P networks using three known approaches; content sharing using cellular vendor's network, through Bluetooth communication directly among different peers and through MMS and SMS messaging. Authors have come up with distinctive ideas to deal with such threats, however, most of them focus solely on one way of threat propagation at any instance of time, unrealistically discarding all other windows of threat propagation. Some approaches target only one specific worm or worm behaviour. There have been over four hundred mobile P2P worms discovered so far and hence the scope of current detection mechanisms comes to literally a nought. We bring in a unified framework for worm detection & throttling in mobile P2P networks that deals with epidemiological spreading of worms through all three windows of propagation. Solution delegates guardian nodes in the network to throttle worms once detected through collaborative information sharing between mobile devices and the guardian nodes. It targets different types of worm behaviours, hence giving it a significant edge over previous approaches. By employing artificial intelligence techniques, the framework can adapt to tackle ever-evolving worm attack strategies.

Phagocytes: A Holistic Defense and Protection Against Active P2P Worms

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Anti-worm Based Defensive scheme for P2P Worm

Fast quarantining of proactive worms in unstructured P2P networks

Cooperation System of Worm Detection and Quarantine in Real Time

Defense against Passive Worms in P2P Networks

Defending P2P networks based on benign worms

Defending P2P Networks against Malicious Worms Based on Benign Worms

An Agent-Oriented Network Worm Defense System based on Optimized Path

Study on adaptive trust alert correlation P2P overlay IDS

Proactive P2p Worm Containment Via Automatic Authentication

Analysis and countermeasure on P2P worms

Containing Proactive P2P Worm Based on Its Multicast Characteristic

A distributed framework for passive worm detection and throttling in P2P networks

Modeling Propagation and Immunization of Passive Wormsin Peer-to-Peer Networks

Suicide Based P2P Worms Defensive Approach

Improved Distributed Framework for Worm Detection & Throttling in Mobile Peer-to-Peer Networks

Modeling and Defending Against Adaptive Bittorrent Worms in Peer-To-Peer Networks

FPM: Four-factors Propagation Model for Passive P2P Worms

Proactive Worm Propagation Modeling and Analysis in Unstructured Peer-to-peer Networks

Reactive Worms Propagation Modeling and Analysis in Peer-to-Peer Networks