P2P网络中沉默型蠕虫传播建模与分析  

Reactive Worms Propagation Modeling and Analysis in Peer-to-Peer Networks

作　　者：冯朝胜[1,3] 秦志光[1] 劳伦斯·库珀特[2] 罗瑞莎·托卡库克[2] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都610054 [2]伦敦大学玛丽皇后学院电子工程系,伦敦E14NS [3]四川师范大学计算机科学学院,成都610066

出　　处：《计算机研究与发展》2010年第3期500-507,共8页Journal of Computer Research and Development

基　　金：国家自然科学基金项目(60473090,60873075);国家自然科学基金与英国皇家科学会合作项目(60711130232);国家“八六三”高技术研究发展计划基金项目(2009AA01Z422)

摘　　要：蠕虫给Internet带来巨大威胁,给作为Internet覆盖网的P2P网络带来的威胁更大,这主要是由P2P网络本身的特点决定的(就是这些特点为用户带来巨大方便).考虑到威胁P2P网络的3种蠕虫中沉默型蠕虫传播模型还没有被提出(其他2种分别为被动型蠕虫和主动型蠕虫)和沉默型蠕虫的巨大危害性,提出了沉默型蠕虫的传播模型和免疫模型,并基于该模型推导出了沉默型蠕虫不会流行的条件.为了考查各个P2P参数对蠕虫传播的影响和从实践上验证推导出的蠕虫不会流行的条件,使用Matlab进行了大量仿真实验.实验表明,理论推导出的蠕虫不会流行的条件是正确的;实验还进一步表明,蠕虫的流行程度是由流行指数来决定的,这为提出蠕虫控制策略提供了依据.通过对决定流行指数的几个参数的分析表明,在发现蠕虫时迅速降低下载率是补丁发布前控制蠕虫最有效的办法.Worms have posed a serious threat to Internet. Meanwhile, worms have posed a more serious threat to P2P networks based on Internet. The key properties of P2P networks, which bring facilities to users, result in vulnerabilities to attacks from P2P worms. Considering that models of the other two P2P worms of three classes of P2P worms,namely passive worms and active worms, have been proposed and reactive worms have seriously threatened P2P networks, the models of propagation and immunization of P2P reactive worms are proposed. Furthermore, the condition of worm free in the stead state is deduced from the model of propagation of reactive worms. In order to validate the epidemic model proposed and the condition of worms free in the steady state, large scale simu｜ation experiments are carried out with the software Matlab. All the simulations validate the model and the necessary conditions. In addition, all the simulations show that it is the prevalent index that is in charge of whether worms are prevalent and the degree of worm spread if it will be prevalent. Obviously, the prevalent index is very helpful to find worm-throttling strategies. Analysis of the P2P- related parameters, which determine the value of the prevalent index, shows that decreasing the download rate is the most effective method of throttling worm spread before the corresponding patches are released.

关 键 词：P2P网络 沉默型蠕虫 流行指数 传播建模 仿真 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]