Abstract:IP address mutation is a proactive defense method that is used to reduce the risk of network attacks, especially to deal with the worm propagation attacks. However, previous work did not give much consideration to the negative effects that IP address mutation could bring to network performance. To be specific, there is a trade-off between network performance and security, which implies that when a security mechanism is reinforced, network performance would be impaired and vice versa. Therefore, in order to achieve the optimal balance between performance and security, an optimal solution should be provided. In this paper, we propose an adaptive IP mutation defense method which is based on temporal-dimension, to dynamically control the mutation interval according to real-time measurable metrics, assurance and avoidance. This method leverages a genetic algorithm to achieve the optimization of performance-security trade-off. We then evaluate our method in a simulated computer cluster environment, including 1024 hosts, and demonstrate that our method can successfully find the optimal solution according to the experimental results. For example, it can reduce the worm propagation significantly, while maintaining the network performance in a predefined level.

An Anti-Worm with Balanced Tree Based Spreading Strategy

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Cooperation System of Worm Detection and Quarantine in Real Time

An Agent-Oriented Network Worm Defense System based on Optimized Path

Anti-worm Based Defensive scheme for P2P Worm

Modeling and Defending Against Adaptive Bittorrent Worms in Peer-To-Peer Networks

Worm defense system research based on intelligent maintenance trees.

Modeling and Analyzing of the Interaction Between Worms and Antiworms During Network Worm Propagation

Proactive Worm Propagation Modeling and Analysis in Unstructured Peer-to-peer Networks

Propagation Model of Active Worms in P2P Networks

Modeling and Analysis of Passive Worm Propagation in the P2P File-Sharing Network

The Division Based Restraint Approach of Worm Propagation

Fast quarantining of proactive worms in unstructured P2P networks

Modeling and Analysis of P2P Worms

Worm Warning and Optimization of Nonlinear Propagation Model

ON IMPROVED STRATEGY OF ACTIVE RESTRAINT ALGORITHM FOR NETWORK WORMS

Defense against Passive Worms in P2P Networks

Active worm countermeasure based on detection

Modeling active worm propagation on the P2P network

Worm Propagation Modeling and Analysis Based on the Mechanism of Dynamic Quarantine

Model and estimation of worm propagation under network partition