2005 Articles
The Effect of DNS Delays on Worm Propagation in an IPv6 Internet
It is a commonly held belief that IPv6 provides greater security against random-scanning worms by virtue of a very sparse address space. We show that an intelligent worm can exploit the directory and naming services necessary for the functioning of any network, and we model the behavior of such a worm in this paper. We explore via analysis and simulation the spread of such worms in an IPv6 Internet. Our results indicate that such a worm can exhibit propagation speeds comparable to an IPv4 random-scanning worm. We develop a detailed analytical model that reveals the relationship between network parameters and the spreading rate of the worm in an IPv6 world. We also develop a simulator based on our analytical model. Simulation results based on parameters chosen from real measurements and the current Internet indicate that an intelligent worm can spread surprising fast in an IPv6 world by using simple strategies. The performance of the worm depends heavily on these strategies, which in turn depend on how secure the directory and naming services of a network are. As a result, additional work is needed in developing detection and defense mechanisms against future worms, and our work identifies directory and naming services as the natural place to do it.
Subjects
Files
-
WormPropagationIPv6.pdf application/pdf 175 KB Download File
Also Published In
- Title
- IEEE INFOCOM 2005: the conference on computer communications: 24th Annual Joint Conference of the IEEE Computer and Communications Societies: proceedings: 13-17 March, 2005, Hyatt Regency Miami, Miami, Florida USA
- Publisher
- IEEE
- DOI
- https://doi.org/10.1109/INFCOM.2005.1498526
More About This Work
- Academic Units
- Computer Science
- Published Here
- June 28, 2012