Comparison of the mean-field approach and simulation in a peer-to-peer botnet case study

Kolesnichenko, Anna and Remke, Anne and Boer de, Pieter-Tjerk and Haverkort, Boudewijn (2011) Comparison of the mean-field approach and simulation in a peer-to-peer botnet case study. In: 8th European Performance Engineering Workshop, EPEW 2011, 12-13 Octtober 2011, Borrowdale, United Kingdom.

PDF
Restricted to UT campus only: Request a copy
999Kb

Abstract:	Peer-to-peer botnets, as exemplified by the Storm Worm and Stuxnet, are a relatively new threat to security on the internet: infected computers automatically search for other computers to be infected, thus spreading the infection rapidly. In a recent paper, such botnets have been modeled using Stochastic Activity Networks, allowing the use of discrete-event simulation to judge strategies for combating their spread. In the present paper, we develop a mean-field model for analyzing botnet behavior and compare it with simulations obtained from the Möbius tool. We show that the mean-field approach provides accurate and orders-of- magnitude faster computation, thus providing very useful insight in spread characteristics and the effectiveness of countermeasures.
Item Type:	Conference or Workshop Item
Copyright:	© 2011 Springer
Faculty:	Electrical Engineering, Mathematics and Computer Science (EEMCS)
Research Group:	Design and Analysis of Communication Systems (DACS)
Link to this item:	http://purl.utwente.nl/publications/78784
Export this item as:	BibTeX EndNote HTML Citation Reference Manager

Show download statistics for this publication

Repository Staff Only: item control page