The effect of DNS delays on worm propagation in an IPv6 Internet

— It is a commonly held belief that IPv6 provides greater security against random-scanning worms by virtue of a very sparse address space. We show that an intelligent worm can exploit the directory and naming services necessary for the functioning of any network, and we model the behavior of such a worm in this paper. We explore via analysis and simulation the spread of such worms in an IPv6 Internet. Our results indicate that such a worm can exhibit propagation speeds comparable to an IPv4 random-scanning worm. We develop a detailed analytical model that reveals the relationship between network parameters and the spreading rate of the worm in an IPv6 world. We also develop a simulator based on our analytical model. Simulation results based on parameters chosen from real measurements and the current Internet indicate that an intelligent worm can spread surprising fast in an IPv6 world by using simple strategies. The performance of the worm depends heavily on these strategies, which i...

• Type: Conference
• Year: 2005
• Where: INFOCOM
• Authors: Abhinav Kamra, Hanhua Feng, Vishal Misra, Angelos D. Keromytis
• Keywords: Communications, INFOCOM 2005, Intelligent Worm, Random-scanning Worm, Worm