propagation modeling for p2p botnet in structured p2p network

ISCAS OpenIR

	propagation modeling for p2p botnet in structured p2p network
	Qian Quan; Xiao Chao-Jie; Zhang Rui
	2012
发表期刊	Ruan Jian Xue Bao/Journal of Software
ISSN	1000-9825
卷号	23 期号:12 页码:3161-3174
摘要	Depending on the structured peer-to-peer networks, the P2P botnets are the main threats of the Internet in the future. In this paper, a formal mathematical P2P botnet propagation model is built based on a deep analysis of two typical structured P2P protocols, Chord and Kademlia. This model, it integrates different factors, such as structured P2P protocols, two-factor immunizations, and host online rates to describe the structured P2P botnet propagation mechanisms comprehensively. Meanwhile, in order to evaluate the model effectiveness, simulate the P2P botnets propagation, the difference between the theoretical model and the simulation is used to verify the model efficiency. The experiments prove the correctness of the theoretical model also verify the different influences of structured P2P protocols, immunization mechanisms, and the host online rates on P2P botnet propagation. Moreover, through simulating P2P network with millions of nodes, it can be shown that the propagation model is correct and valid in large scale network, which provides a theoretical basis for botnet detection and prevention. © Copyright 2012, Institute of Software, the Chinese Academy of Science. All right reserved.
收录类别	EI ; CNKI
其他摘要	依赖结构化对等网传播的P2P僵尸是未来互联网面临的重要威胁.详细分析了两种典型的结构化P2P协议Chord和Kademlia的工作原理,在此基础上,使用数学建模的方法建立了结构化P2P僵尸网络的传播模型.该模型将Kademlia,Chord协议与双因子免疫机制、主机在线率等因素相结合,较为全面地研究了两种典型的结构化P2P网络中僵尸的传播机理,并使用软件仿真的方法模拟了节点超过百万时,结构化P2P网络中僵尸的传播行为,通过软件仿真得出的数据与理论数据进行对比,验证了模型的正确性.从实验结果可以看出:对于Kademlia和Chord两种结构化P2P网络,僵尸传播无论是双因子免疫模型还是结合双因子与主机在线率的模型,理论模型与仿真结果都非常吻合,体现了模型的准确性,为僵尸的检测与防御提供了理论依据.
关键词	网络安全结构化对等网 P2p僵尸网络传播模型
部门归属	(1) School of Computer Science and Engineering Shanghai University Shanghai 200072 China; (2) State Key Laboratory of Information Security Institute of Software The Chinese Academy of Sciences Beijing 100190 China
资助者	国家自然科学基金(61003248)\|国家教育部博士点基金(20093108120016)\|上海教委重点学科(J50103)\|上海教委创新基金(09YZ05)
语种	中文
内容类型	期刊论文
URI标识	http://ir.iscas.ac.cn/handle/311060/15127
专题	中国科学院软件研究所
推荐引用方式 GB/T 7714	Qian Quan,Xiao Chao-Jie,Zhang Rui. propagation modeling for p2p botnet in structured p2p network[J]. Ruan Jian Xue Bao/Journal of Software,2012,23(12):3161-3174.
APA	Qian Quan,Xiao Chao-Jie,&Zhang Rui.(2012).propagation modeling for p2p botnet in structured p2p network.Ruan Jian Xue Bao/Journal of Software,23(12),3161-3174.
MLA	Qian Quan,et al."propagation modeling for p2p botnet in structured p2p network".Ruan Jian Xue Bao/Journal of Software 23.12(2012):3161-3174.