Peer-to-peer system-based active worm attacks: Modeling, analysis and defense

Active worms continue to pose major threats to the security of today's Internet. This is due to the ability of active worms to automatically propagate themselves and compromise hosts in the Internet. Due to the recent surge of Peer-to-Peer (P2P) systems with large numbers of users and rich connectivity, P2P systems can be a potential vehicle for the attacker to achieve rapid worm propagation in the Internet. In this paper, we tackle this issue by modeling and analyzing active worm propagation on top of P2P systems, and designing effective defense strategies within P2P systems to suppress worm propagation. In particular; 1) we define two P2P-based active worm attack models: an offline P2P-based hit-list attack model and an online P2P-based attack model; 2) we conduct a detailed analysis on the impacts of worm propagation on top of P2P-based systems, and study the sensitivity of worm propagation to various P2P system and attack related parameters; 3) finally, we propose defense str...

• Type: Journal
• Year: 2008
• Where: COMCOM
• Authors: Wei Yu, Sriram Chellappan, Xun Wang, Dong Xuan
• Keywords: Active Worm, COMCOM 2008, P2P Systems, Worm Propagation