Abstract:P2P worms pose a serious threat to Internet infrastructure and terminal users because of their overwhelming propagation speed. Manual reactions fall behind the fast propagation of P2P worms. Current automatic techniques are still not adequate to be deployed on a large scale for several challenges including low accuracy, low efficiency, etc. In this paper, we bring forward a repair-and-patch approach to quarantine malicious worms quickly in unstructured P2P networks. Our work has two major contributions. Firstly, we propose two kinds of benign worms, which differ in functions and spread strategies, to cooperatively battle against malicious worms. Secondly, we derive discrete difference equations to depict the interplay between malicious and benign worms. Four factors - manual countermeasures, P2P topology, configuration diversity and attack and defense strategies - are modeled in the equations. Preliminary experiments are promising. Compared with sheer manual reactions, our approach is about two times faster and protects about 35% more hosts. In comparison with benign worms, which search targets by random scanning, our proposed method guards about 34.4% more hosts with lower consumption of bandwidth resources.

Effective Strategy of Worm Dynamic Defence and Containment

Cooperation System of Worm Detection and Quarantine in Real Time

Research and Development of Worm Detection Technologies

ON IMPROVED STRATEGY OF ACTIVE RESTRAINT ALGORITHM FOR NETWORK WORMS

An optimal vaccine delivery strategy in worm defense system

Design and Implementation of Network Worm Detection System for Internal Network

Research into Agent-oriented Worm Defense System

An Agent-Oriented Network Worm Defense System based on Optimized Path

Principle and Design of Active Defense System to Contain Internet Worm

Detecting Randomly Scanning Worms Based on Heavy-Tailed Property

Active worm countermeasure based on detection

A worm behavioral approach to susceptible host detection

Active Technologies to Contain Internet Worm

Approach to Early Detection and Defense Against Internet Worms

Worm Attack Detection and Response

Effective Worm Automatic Defense System Based Signature Generation

Worm Propagation Modeling and Analysis Based on the Mechanism of Dynamic Quarantine

Monitoring Network And Defending Against Worm Attacks

Worm defense system research based on intelligent maintenance trees.

Fast quarantining of proactive worms in unstructured P2P networks

The analysis of worm non-linear propagation model and the design of worm distributed detection technology