The research and analysis of worm scanning strategies in IPv6 network

With the remarkable development of Internet, the worm propagation has become an crucial threat to the security of the Internet. While a perfect scanning strategy is an important part of their propagation. It is common to scan the whole address space to get the vulnerable hosts in IPv4. Obviously, it is difficult to implement in IPv6 due to its huge address space. Therefore, the researchers propose many other excellent scanning strategies by now. However they only use them singly without the details of performance. Three specific scanning strategies in local-area network are researched and experimented in this paper. They are Fake RA messages, Multicast ping6, and Error detection messages. We analyze the advantages and disadvantages among them through time delay and simulation. Experiment results show that two of the scanning strategies, Fake RA messages and Multicast ping6, are able to detect active hosts faster the third one.