PWO: Peer-To-Peer Worm Evolution Observer

Peer-to-peer based applications are coming, such as instant messaging, file sharing and video streaming. With the maturation of P2P technology there is larger and larger number of users. But P2P network´s characteristics make itself a potential vehicle for the active worms to achieve fast worm propagation. So it is important to study the worm´s spreading model and relative countermeasure under P2P systems. P2P worm´s new characteristics are analyzed and a simple model is proposed in this paper. A novel method P2P worm evolution observer (PWO) is also described, this method introduces some observers in the P2P network to monitor some nodes´ infected during the worm´s spreading period, and traces the worm´s infected origin and attacking paths under the global P2P network topology. Theory and simulation results show that this method can gain nearly 100% probability to trace the worm evolution, even when only less than 1% of the nodes are deployed with observers.