对抗P2P蠕虫的邻居选择机制

Neighbor Selection Scheme Against P2P Worms

P2P网络中节点的邻居列表为蠕虫提供了快速传播的途径.网络中节点系统的漏洞情况各异,致使它们抵抗蠕虫的能力不同.无结构P2P网络中节点的位置影响着蠕虫围堵策略的效果,甚至影响整个网络的安全.为了对抗P2P蠕虫,在区分漏洞级别的基础上定义节点之间距离的计算方法,根据节点抵抗蠕虫的能力为其选择邻居,使得P2P网络中的节点分布更利于抵抗蠕虫的攻击;并将这种邻居选择机制应用到无结构P2P网络KaZaA中.实验结果表明,该选择机制明显提高了P2P网络对抗蠕虫的能力.

The neighbor lists of peers in P2P networks provide an easy way for the propagation of worms. The vulner abilities of peers in P2P networks always vary from one another, so their abilities against worms are different. And the peers＇ positions in the unstructured P2P network affect the worm containment and even the security of the whole P2P network. For countering P2P worms, based on the vulnerability rating, the distance between peers was defined, and the neighbors for a peer were selected according to its ability against worms to make the distribution of peers have an advantage in resisting the worm attacks. The neighbor selection scheme was applied to the unstructured P2P system KaZaA. Experiment results show that this scheme improves the capability of resistance against worms in P2P network observably.