MITIGATING RAPIDLY PROPAGATING WORM THREATS IN EMERGENT NETWORKS

Worm threats in emergent networks such as P2P and cellular networks have yet received due attention. This book aims at designing automated, real-time, and systematic solutions to defeat worms. For P2P networks, we first propose a partition-based and a CDS-based scheme to contain ultra-fast topological worms. These schemes leverage the underlying P2P overlay and adopted graph-theory to distribute security patches to vulnerable hosts. We then propose a P2P-tailored approach which consists of a download-based and a search-based scheme to combat file-sharing worms. Both schemes internally disseminate security patches to participating peers in a timely and distributed fashion. For cell-phone networks, we propose two unique device-level defenses, which enforce security policies to block worms and leverage artificial intelligence to differentiate human or worm initiators in cellphones. We also propose a systematic solution which deploys an identity-based signature scheme at both the sender and the recipient, and a automated patching scheme at the network. We show that a combined terminal and network-level defense effectively speeds up worm identification and victim disinfection.

Autorentext

Liang Xie received his BS degree in EE from Soochow University in 1993. Before joining the CSE department in Pennsylvania State University in 2004, he had been working in telecom companies such as Huawei and China Telecom as a software engineer and manager for 10 years. His area covers communication protocols and security in network systems.