Abstract:IP address mutation is a proactive defense method that is used to reduce the risk of network attacks, especially to deal with the worm propagation attacks. However, previous work did not give much consideration to the negative effects that IP address mutation could bring to network performance. To be specific, there is a trade-off between network performance and security, which implies that when a security mechanism is reinforced, network performance would be impaired and vice versa. Therefore, in order to achieve the optimal balance between performance and security, an optimal solution should be provided. In this paper, we propose an adaptive IP mutation defense method which is based on temporal-dimension, to dynamically control the mutation interval according to real-time measurable metrics, assurance and avoidance. This method leverages a genetic algorithm to achieve the optimization of performance-security trade-off. We then evaluate our method in a simulated computer cluster environment, including 1024 hosts, and demonstrate that our method can successfully find the optimal solution according to the experimental results. For example, it can reduce the worm propagation significantly, while maintaining the network performance in a predefined level.

Modeling active worm propagation on the P2P network

Propagation Model of Non-scanning Active Worm in Unstructured P2P Network

Worm traffic modeling for network performance analysis

Modeling Propagation of Active P2P Worm in Chord Network.

Modeling the emergence on dynamic peer to peer network

Design and Implementation of P2p Users' Action Simulation System

Analysis of Pollution Disseminating Model of P2P Network

Worm Intrusion Alarm Modeling Based on Network Traffic Character

Modeling and Analysis of Resource'S Load-Scale in P2p Network

An Agent-Oriented Network Worm Defense System based on Optimized Path

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Modeling and Analyzing of the Interaction Between Worms and Antiworms During Network Worm Propagation

An Anti-attack Model Based on Complex Network Theory in P2P networks

Learning the Propagation of Worms in Wireless Sensor Networks

Analyzing Impacts Of Software Diversity On Worm Propagation In Peer-To-Peer Networks

Breaking Monocultures In P2p Networks For Worm Prevention

Research of Worm-Propagation Prediction Based on Stochastic Experiment

Fine-granular Simulation and Modeling of Worm Propagation Using SSFNet

Towards Understanding Dynamics of Mobile Phone Worm Propagation Using Social Network Analysis

Modeling and Analysis of Worm Propagation in IPv6 Networks

Adapting the Right Infection Functions for Virus Propagation in Computer Networks