Abstract:IP address mutation is a proactive defense method that is used to reduce the risk of network attacks, especially to deal with the worm propagation attacks. However, previous work did not give much consideration to the negative effects that IP address mutation could bring to network performance. To be specific, there is a trade-off between network performance and security, which implies that when a security mechanism is reinforced, network performance would be impaired and vice versa. Therefore, in order to achieve the optimal balance between performance and security, an optimal solution should be provided. In this paper, we propose an adaptive IP mutation defense method which is based on temporal-dimension, to dynamically control the mutation interval according to real-time measurable metrics, assurance and avoidance. This method leverages a genetic algorithm to achieve the optimization of performance-security trade-off. We then evaluate our method in a simulated computer cluster environment, including 1024 hosts, and demonstrate that our method can successfully find the optimal solution according to the experimental results. For example, it can reduce the worm propagation significantly, while maintaining the network performance in a predefined level.

Worm defense system research based on intelligent maintenance trees.

An Agent-Oriented Network Worm Defense System based on Optimized Path

Research into Agent-oriented Worm Defense System

Cooperation System of Worm Detection and Quarantine in Real Time

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Design and Implementation of Network Worm Detection System for Internal Network

Research and Development of Worm Detection Technologies

Worm Intrusion Alarm Modeling Based on Network Traffic Character

Principle and Design of Active Defense System to Contain Internet Worm

Worm Attack Detection and Response

Monitoring Network And Defending Against Worm Attacks

Approach to Early Detection and Defense Against Internet Worms

An Anti-Worm with Balanced Tree Based Spreading Strategy

The analysis of worm non-linear propagation model and the design of worm distributed detection technology

Active Technologies to Contain Internet Worm

A worm behavioral approach to susceptible host detection

Recommendation of Important Nodes in Deployment Optimization Model of Defense Strategy

Effective Strategy of Worm Dynamic Defence and Containment

Worm Warning and Optimization of Nonlinear Propagation Model

Active worm countermeasure based on detection

Anti-worm Based Defensive scheme for P2P Worm