| Instant Messaging Worms Propagation Simulation and Countermeasures |
| |
| 引用本文： | HU Huaping WEI Jianli. Instant Messaging Worms Propagation Simulation and Countermeasures[J]. 武汉大学学报:自然科学英文版, 2007, 12(1): 95-100. DOI: 10.1007/s11859-006-0221-z |
| |
| 作者姓名： | HU Huaping WEI Jianli |
| |
| 作者单位： | School of Computer Science, National University of DefenseTechnology, Changsha 410073, Hunan, China |
| |
| 基金项目： | Foundation item： Supported by the National Natural Science Foundation of China （60573136） |
| |
| 摘 要： | Instant messaging （IM） has become one of the most popular online communication tools among consumer and enterprise IM users. It provides instant message delivery, as well as convenient file transfer services. The increasing popularity and functionalities of IM programs have made it increasingly attractive for attackers, especially for worm writers. IM contact list offers worm an easy way of finding potential victims so that the worm could achieve a surprising spreading speed. This paper first presents our experimental results of simulating IM worm propagation in the logical network defined by IM contact lists, which is reported to be a scale-free network. Then, the existing proposals for detecting and containing IM worm epidemics are discussed. At last, a new algorithm for this purpose is presented, which is based on the observation of the bi-directional nature of IM worm traffic, and its advantages and possible improvements in implementation are analyzed. The simulation results show the proposed algorithm is of significant effect on restricting IM worm propagation.
|
| 关 键 词： | 计算机网络 网络病毒 安全技术 ＂蠕虫＂ |
| 文章编号： | 1007-1202（2007）01-0095-06 |
| 收稿时间： | 2006-05-19 |
Instant messaging worms propagation simulation and countermeasures |
| |
| Hu Huaping,Wei Jianli. Instant messaging worms propagation simulation and countermeasures[J]. Wuhan University Journal of Natural Sciences, 2007, 12(1): 95-100. DOI: 10.1007/s11859-006-0221-z |
| |
| Authors: | Hu Huaping Wei Jianli |
| |
| Affiliation: | (1) School of Computer Science, National University of Defense Technology, Changsha, 410073, Hunan, China |
| |
| Abstract: | Instant messaging (IM) has become one of the most popular online communication tools among consumer and enter- prise IM users. It provides instant message delivery, as well as convenient file transfer services. The increasing popularity and functionalities of IM programs have made it increasingly attractive for attackers, especially for worm writers. IM contact list offers worm an easy way of finding potential victims so that the worm could achieve a surprising spreading speed. This paper first pre- sents our experimental results of simulating IM worm propagation in the logical network defined by IM contact lists, which is re- ported to be a scale-free network. Then, the existing proposals for detecting and containing IM worm epidemics are discussed. At last, a new algorithm for this purpose is presented, which is based on the observation of the bi-directional nature of IM worm traffic, and its advantages and possible improvements in implementation are analyzed. The simulation results show the proposed algorithm is of significant effect on restricting IM worm propagation. |
| |
| Keywords: | instant messaging worms simulation propagation worm detection and containment |
| 本文献已被 CNKI 维普 SpringerLink 等数据库收录！ |
