P2P Anti-worm: Modeling and Analysis of a New Worm Counter-measurement Strategy

This paper proposes a new kind of anti-worm called P2P anti-worm which propagates using P2P techniques. A mathematical analysis of this new approach is conducted and a mathematical model of P2P anti-worm is introduced to analyze the propagation. Simulation is made on SSFNET to compare the P2P anti-worm and pure random scan worm. The simulation results show that P2P anti-worm can slow down the speed of the malicious worm. Then this paper discusses the relationship between the propagation speed and the P2P overlay average degree, the initial number of the anti-worm and the release time delay. It is noticed from the experiments that the P2P feature makes anti-worm safer, and its propagation more stabile, more controllable and cost less.