Modeling and analysis of Internet worm propagation

doi:10.1016/S1005-8885(09)60489-1

中国邮电高校学报(英文) ›› 2010, Vol. 17 ›› Issue (4): 63-68.doi: 10.1016/S1005-8885(09)60489-1

• Artificial Intelligence • 上一篇下一篇

Modeling and analysis of Internet worm propagation

苏飞¹,林昭文³,马严²

1. 北京邮电大学信息网络中心
2.
3. 北京邮电大学

收稿日期:2009-05-21 修回日期:2010-05-07 出版日期:2010-08-30 发布日期:2010-08-31
通讯作者: 苏飞 E-mail:suf@buptnet.edu.cn
基金资助:
This work was supported by the Ministry of Education Science and Technology Basic Resource Data Platform (507001), the Ministry of Education Research Project for Returned Talents after Studying Abroad, and the Chinese Universities Scientific Fund (2009RC0502), the International Scientific and Technological Cooperation Program (S2010GR0902).

Modeling and analysis of Internet worm propagation

Institute of Networking Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China 2. Beijing Key Laboratory of Intelligent Telecommunications Software and Multimedia, Beijing University of Posts and Telecommunications, Beijing 100876, China

Received:2009-05-21 Revised:2010-05-07 Online:2010-08-30 Published:2010-08-31
Supported by:
This work was supported by the Ministry of Education Science and Technology Basic Resource Data Platform (507001), the Ministry of Education Research Project for Returned Talents after Studying Abroad, and the Chinese Universities Scientific Fund (2009RC0502), the International Scientific and Technological Cooperation Program (S2010GR0902).

摘要/Abstract

摘要：

Although the frequency of Internet worm’s outbreak is decreased during the past ten years, the impact of worm on people’s privacy security and enterprise’s efficiency is still a severe problem, especially the emergence of botnet. It is urgent to do more research about worm’s propagation model and security defense. The well-known worm models, such as simple epidemic model (SEM) and two-factor model (TFM), take all the computers on the internet as the same, which is not accurate because of the existence of network address translation (NAT). In this paper, we first analyze the worm’s functional structure, and then we propose a three layer worm model named three layres worm model (TLWM), which is an extension of SEM and TFM under NAT environment. We model the TLWM by using deterministic method as it is used in the TFM. The simulation results show that the number of NAT used on the Internet has effects on worm propagation, and the more the NAT used, the slower the worm spreads. So, the extensive use of NAT on the Internet can restrain the worm spread to some extent.

关键词:

worm propagation, model, TLWM, NAT

Abstract:

Key words:

worm propagation, model, TLWM, NAT

SU Fei, LIN Zhao-wen, MA Yan. Modeling and analysis of Internet worm propagation[J]. Acta Metallurgica Sinica(English letters), 2010, 17(4): 63-68.

参考文献

1. Feily M, Shahrestani A, Ramadass S. A survey of botnet and botnet detection. Proceedings of the 3rd International Conference on Emerging Security Information, Systems and Technologies (SECURWARE’09), Jun 18-23, 2009, Athens, Greece. Piscataway, NJ, USA: IEEE, 2009: 268-273

2. Li P, Salour M, Su X. A survey of internet worm detection and containment. IEEE Communications Surveys and Tutorials, 2008, 10(1): 20-35

3. Zou C C, Gong W B, Towsley D, et al. Code Red worm propagation modeling and analysis. Proceedings of the 9th ACM Conference on Computer and Communication Security (CCS’02), Nov 18-22, 2002, Washington DC, USA. New York, NY, USA: ACM, 2002:138-147

4. Zou C C, Gong W B, Towsley D, et al. The monitoring and early detection of internet worms. IEEE/ACM Transaction on Networking. 2005, 13(5): 961-974

5. Chen Z, Gao L, Kwiat K. Modeling the spread of active worms. Proceedings of the IEEE 22nd Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM’03): Vol 3, Mar 30-Apr 3, 2003, San Francisco, CA, USA. Piscataway, NJ, USA: IEEE, 2003: 1890-1900

6. Su F, Lin Z W, Ma Y. Worm propagation modeling based on two-factor model. Proceedings of the 5th International Conference on Wireless Communications, Networking and Mobile Computing (WiCOM09), Sep 24-26, 2009, Beijing, China. Piscataway, NJ, USA: IEEE, 2009: 4p

7. Su F, Lin Z W, Ma Y. Effects of firewall on worm propagation. Proceedings of 2009 IEEE International Conference on Communications Technology and Applications (ICCTA’09), Oct 16-18, 2009, Beijing, China. Piscataway, NJ, USA: IEEE Computer Society, 2009: 880-884

8. Su F, Lin Z W, Ma Y. A survey of internet worm propagation models. Proceedings of the 2nd IEEE International Conference on Broadband Network & Multimedia Technology (IC-BNMT’09), Oct 18-20, 2009, Beijing, China. Piscataway, NJ, USA: IEEE, 2009: 453-457

9. Wang Y, Chakrabarti D, Wang C X, et al. Epidemic spreading in real networks: an eigenvalue viewpoint. Proceedings of the 22nd International Symposium on Reliable Distributed Systems (SRDS’03), Oct 6-18, 2003, Florence, Italy. Piscataway, NJ, USA: IEEE, 2003: 25-34

10. Okamura H, Kobayashi H, Dohi T. Markovian modeling and analysis of Internet worm propagation. Proceedings of the 16th IEEE International Symposium on Software Reliability Engineering (ISSRE’05), Nov 8-11, 2005, Chicago, IL, USA. Piscataway, NJ, USA: IEEE, 2005: 149-158

11. Kamra A, Feng H H, Misra V, et al. The effect of DNS delays on worm propagation in an IPv6 Internet. Proceedings of the 24th Annual Joint Conference of the IEEE Computer and Communications Societies (INFOCOM’05): Vol 4, Mar 13-17, 2005, Miami, FL, USA. Piscataway, NJ, USA: IEEE, 2005: 2405-2414

12. Xing C Y, Yang L, Chen M. Modeling analysis of network worm propagation, Journal of University of Electronic Science and Technology of China, 2006, 36(3): 590-593 (in Chinese)

13. Rajab M A, Monrose F, Terzis A. On the impact of dynamic addressing on malware propagation. Proceedings of the 4th ACM Workshop on Recurring Malcode (WORM’06), Nov 3, 2006, Alexandria, VA, USA. New York, NY, USA: ACM, 2006: 51-56

Modeling and analysis of Internet worm propagation

Modeling and analysis of Internet worm propagation

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 0

编辑推荐

Metrics

本文评价