Comparison of the mean-field approach and simulation in a peer-to-peer botnet case study

Share/Save/Bookmark

Kolesnichenko, Anna and Remke, Anne and Boer, Pieter-Tjerk de and Haverkort, Boudewijn (2011) Comparison of the mean-field approach and simulation in a peer-to-peer botnet case study. In: 8th European Performance Engineering Workshop, EPEW 2011, 12-13 Octtober 2011, Borrowdale, United Kingdom (pp. pp. 133-147).

[img] PDF
Restricted to UT campus only
: Request a copy
1MB
Abstract:Peer-to-peer botnets, as exemplified by the Storm Worm and Stuxnet, are a relatively new threat to security on the internet: infected computers automatically search for other computers to be infected, thus spreading the infection rapidly. In a recent paper, such botnets have been modeled using Stochastic Activity Networks, allowing the use of discrete-event simulation to judge strategies for combating their spread. In the present paper, we develop a mean-field model for analyzing botnet behavior and compare it with simulations obtained from the Möbius tool. We show that the mean-field approach provides accurate and orders-of- magnitude faster computation, thus providing very useful insight in spread characteristics and the effectiveness of countermeasures.
Item Type:Conference or Workshop Item
Copyright:© 2011 Springer
Faculty:
Electrical Engineering, Mathematics and Computer Science (EEMCS)
Research Group:
Link to this item:http://purl.utwente.nl/publications/78784
Export this item as:BibTeX
EndNote
HTML Citation
Reference Manager

 

Repository Staff Only: item control page