P2P worm has its own features and existing simulation approaches can not be used to it directly. In order to simulate large-scale P2P worm, a virtual-node based simulation approach and a double-engine based simulation architecture were proposed. In the virtual-node based P2P simulation solution, the data and the operation of worm nodes were separated to save computational power and storage. Therefore, large-scale P2P worms were simulated with available limited physical resources in single or multiple simulating computers. In double-engine P2P simulation architecture, two engines, local engine and network engine, were used in simulation system. The local engine was responsible for local message processing and the network engine focused on message passing in communication network. Combined with these two engines, packet level P2P worm simulation was provided by the simulation system to enhance the fidelity and scalability. Experimental results showed that the novel simulation solution was practical to simulate large-scale P2P worms with high fidelity.%针对对等网络蠕虫具有高度动态性和规模巨大的特点,提出了适合于P2P蠕虫仿真需要的基于节点虚拟的仿真建模方法和基于双引擎的仿真体系结构.基于节点虚拟的方法是对每个P2P蠕虫的功能和数据进行抽象和分割,通过节约计算资源和存储资源实现大规模P2P蠕虫仿真;基于双引擎的P2P蠕虫仿真结构将仿真任务的管理和网络管理分割,实现P2P蠕虫仿真的真实性和仿真规模的可扩展性.以此为基础,设计了大规模对等网络蠕虫仿真系统,开发了相应的通用仿真平台.在此基础之上,以BitTorrent蠕虫为例,对仿真平台进行了验证和实验分析.结果表明,所提出的方法及开发的系统,可适用于大规模P2P蠕虫的仿真分析.
展开▼
