P2P干预式蠕虫传播仿真分析*

对P2P干预式主动型蠕虫的传播机制进行了研究,指出其传播主要包括四个阶段:信息收集,攻击渗透、自我推进与干预激活。研究发现,P2P干预式蠕虫实际是一种拓扑蠕虫,能利用邻居节点信息准确地确定攻击目标,而且攻击非常隐蔽。采用仿真的方法研究了P2P相关参数对P2P干预式蠕虫传播的影响。仿真实验表明,潜伏主机激活率对干预式蠕虫传播的影响最大,而攻击率对干预式蠕虫传播的影响较小。

Simulation and analysis on propagation of man activated worms in P2P network

This paper studied the propagation mechanism of the man-activating worm, which was a kind of active worms in the P2P network. The propagation procedure of this kind of worm consists of four stages: information collection, penetration, self propulsion and activating. It was found that the worm was a kind of topology-awareness worms. It could properly identify the patent target by exploiting the neighbor information, which was stored in its cache. This may made it very difficult to detect it. For the purpose of examining the effect of P2P-related parameters on propagation of the worm, developed simulation program. Simulations experiments show that amongst all the P2P-related parameters, the probability of worm being activated rather than the attacking rate has the most effect on worm propagation.