Network-Based Detection Method against Proactive P2P Worms Leveraging Application-Level Knowledge

Proactive P2P (peer-to-peer) worm is the most dangerous type of P2P worm which aims at infecting all vulnerable nodes as quickly as possible. In response to such a growing security threat to P2P systems, it is imperative to develop a fast and responsive detection method. In this paper, we propose a network-based detection method against proactive P2P worms leveraging application-level knowledge with change-point detection techniques. Experimental results demonstrate that the proposed method is effective in detecting proactive P2P worms.