Abstract:IP address mutation is a proactive defense method that is used to reduce the risk of network attacks, especially to deal with the worm propagation attacks. However, previous work did not give much consideration to the negative effects that IP address mutation could bring to network performance. To be specific, there is a trade-off between network performance and security, which implies that when a security mechanism is reinforced, network performance would be impaired and vice versa. Therefore, in order to achieve the optimal balance between performance and security, an optimal solution should be provided. In this paper, we propose an adaptive IP mutation defense method which is based on temporal-dimension, to dynamically control the mutation interval according to real-time measurable metrics, assurance and avoidance. This method leverages a genetic algorithm to achieve the optimization of performance-security trade-off. We then evaluate our method in a simulated computer cluster environment, including 1024 hosts, and demonstrate that our method can successfully find the optimal solution according to the experimental results. For example, it can reduce the worm propagation significantly, while maintaining the network performance in a predefined level.

FPM: Four-factors Propagation Model for Passive P2P Worms

Modeling and Analysis of Passive Worm Propagation in the P2P File-Sharing Network

Proactive Worm Propagation Modeling and Analysis in Unstructured Peer-to-peer Networks

Modeling Propagation and Immunization of Passive Wormsin Peer-to-Peer Networks

Propagation Model of Active Worms in P2P Networks

Defense against Passive Worms in P2P Networks

Fast quarantining of proactive worms in unstructured P2P networks

Worm traffic modeling for network performance analysis

Modeling passive worm propagation in mobile P2P networks

Propagation Model of Non-scanning Active Worm in Unstructured P2P Network

Modeling active worm propagation on the P2P network

Anti-worm Based Defensive scheme for P2P Worm

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Modeling and Analysis of P2P Worms

Containing Proactive P2P Worm Based on Its Multicast Characteristic

Active Worm Propagation Modeling in Unstructured P 2 P Networks

Cooperation System of Worm Detection and Quarantine in Real Time

Evolutionary Proactive P2P Worm: Propagation Modeling and Simulation

A distributed framework for passive worm detection and throttling in P2P networks

Analysis and countermeasure on P2P worms

Proactive P2p Worm Containment Via Automatic Authentication