Computer Science – Networking and Internet Architecture
Scientific paper
2011-08-05
Computer Science
Networking and Internet Architecture
Scientific paper
Active Peer-to-Peer (P2P) worms present serious threats to the global Internet by exploiting popular P2P applications to perform rapid topological self-propagation. Active P2P worms pose more deadly threats than normal scanning worms because they do not exhibit easily detectable anomalies, thus many existing defenses are no longer effective. We propose an immunity system with Phagocytes --- a small subset of elected P2P hosts that are immune with high probability and specialized in finding and "eating" worms in the P2P overlay. The Phagocytes will monitor their managed P2P hosts' connection patterns and traffic volume in an attempt to detect active P2P worm attacks. Once detected, local isolation, alert propagation and software patching will take place for containment. The Phagocytes further provide the access control and filtering mechanisms for communication establishment between the internal P2P overlay and the external hosts. We design a novel adaptive and interaction-based computational puzzle scheme at the Phagocytes to restrain external worms attacking the P2P overlay, without influencing legitimate hosts' experiences significantly. We implement a prototype system, and evaluate its performance based on realistic massive-scale P2P network traces. The evaluation results illustrate that our Phagocytes are capable of achieving a total defense against active P2P worms.
Chen Ruichuan
Chen Zhong
Crowcroft Jon
Lua Eng Keong
Tang Liyong
No associations
LandOfFree
Phagocytes: A Holistic Defense and Protection Against Active P2P Worms does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.
If you have personal experience with Phagocytes: A Holistic Defense and Protection Against Active P2P Worms, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Phagocytes: A Holistic Defense and Protection Against Active P2P Worms will most certainly appreciate the feedback.
Profile ID: LFWR-SCP-O-669010