Abstract

Abstract As a basic prerequisite for worm detection based on computational intelligence in networks with locator/identifier separation, it is well worth considering the influence on worm propagation due to the incoming locator/identifier separation. In this paper, according to the characteristics of locator/identifier separation, we systematically analyze the mitigation of worm propagation in three aspects: address semantics, address space and mapping delay. By applying the classical AAWP and SIR worm propagation models, we give a quantitative comparison between today's Internet and networks with locator/identifier separation. In particular, our research results show that, the characteristics of locator/identifier separation can help to markedly mitigate worm propagation, and networks with locator/identifier separation are more resistant to worm propagation than today's Internet.

Highlights

  • In today’s Internet, computational intelligence seems promising to detect a wide variety of threats and attacks, and has been increasingly applied in the area of network and information security, such as Bot-nets detection using network forensics and artificial intelligence techniques[1] and multi-agent intrusion detection system[2]

  • In order to address this issue, this paper summarizes the characteristics of locator/identifier separation, and appropriately selects the classical Analytical Active Worm Propagation (AAWP) and Susceptible-Infected-Removed (SIR) models to illustrate the mitigation of worm propagation

  • This paper aims to argue the influence on worm propagation due to the incoming locator/identifier separation

Read more

Summary

Introduction

In today’s Internet, computational intelligence seems promising to detect a wide variety of threats and attacks, and has been increasingly applied in the area of network and information security, such as Bot-nets detection using network forensics and artificial intelligence techniques[1] and multi-agent intrusion detection system[2]. To develop worm detection based on computational intelligence more efficiently in networks with locator/identifier separation, the study on the mitigation of worm propagation due to the incoming architectural change is absolutely necessary and beneficial It has been pointed out in many recent researches that, the current Internet routing architecture is facing serious scalability issues[3,4], which are basically caused by the overloading of IP address semantics. When the paradigm of locator/identifier separation comes to being, it is worth arguing whether this paradigm can provide better security capability for the Internet From this point, we pay more attention to the damage of worm spread, which cannot be evaded in either today’s Internet or networks with locator/identifier separation. We give some discussions on worm detection based on computational intelligence in networks with locator/identifier separation, and analyze some benefits provided by locator/identifier separation

Related Work
Worm propagation
Network Model
Modeling Mitigation of Worm Propagation
Address semantics
Address space
Mapping delay
Numerical Analysis and Discussion
Discussion on worm detection based on computational intelligence
Findings
Conclusion
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call