Research Article
PWO: Peer-To-Peer Worm Evolution Observer
@INPROCEEDINGS{10.1109/CHINACOM.2006.344875, author={Qiang Li and Qinyuan Feng and Meng Zhang and Liang Hu}, title={PWO: Peer-To-Peer Worm Evolution Observer}, proceedings={1st International ICST Conference on Communications and Networking in China}, publisher={IEEE}, proceedings_a={CHINACOM}, year={2007}, month={4}, keywords={}, doi={10.1109/CHINACOM.2006.344875} }- Qiang Li
Qinyuan Feng
Meng Zhang
Liang Hu
Year: 2007
PWO: Peer-To-Peer Worm Evolution Observer
CHINACOM
IEEE
DOI: 10.1109/CHINACOM.2006.344875
Abstract
Peer-to-peer based applications are coming, such as instant messaging, file sharing and video streaming. With the maturation of P2P technology there is larger and larger number of users. But P2P network's characteristics make itself a potential vehicle for the active worms to achieve fast worm propagation. So it is important to study the worm's spreading model and relative countermeasure under P2P systems. P2P worm's new characteristics are analyzed and a simple model is proposed in this paper. A novel method P2P worm evolution observer (PWO) is also described, this method introduces some observers in the P2P network to monitor some nodes' infected during the worm's spreading period, and traces the worm's infected origin and attacking paths under the global P2P network topology. Theory and simulation results show that this method can gain nearly 100% probability to trace the worm evolution, even when only less than 1% of the nodes are deployed with observers.