A Routing Table Poisoning Model for Peer-to-Peer (P2P) Botnets

Abstract

Due to the global increase in mobile devices and cellular networks such as 3G, 4G, or LTE-A networks, the concept of the interpenetration of peer-to-peer (P2P) overlay networks in cellular environments has gained immense popularity among mobile users. P2P networks allow users to share their computing resources efficiently with the advantages of fault tolerance, robust connectivity, load balancing, and easy maintenance. The ability of a peer to connect to another peer depends on the distinguishing features of the overlay networks. For connection, network routing tables are maintained by each peer in the network to construct the P2P overlay on the Internet. This construction renders the P2P networks vulnerable to the existing attacks using the Internet. Some of these attack models have been proposed in the past using botnets. However, models using botnets do not accommodate the advanced attacks that can infect the majority of the entries in the routing table. In this paper, we propose a model to analyze the impacts of routing table poisoning attacks on the P2P botnet (rBot) architecture. We present the security analysis of the proposed epidemic model for state-of-the-art rBots. The obtained results were effective for attacks on the unstructured P2P static and mobile environments. INDEX TERMS Decentralized botnet, epidemic model, P2P overlay, routing table poisoning, mobility.

A Review on Security-aware Routing Protocols for Mobile Ad hoc Network

“…Routing table poisoning [22]: Routing protocols maintain routing tables which hold information regarding routes of the network. In routing, table poisoning attack the malicious nodes generate and send fabricated signalling traffic, or modify the legal information from other nodes, to create false routes in the routing tables of the participating nodes.…”

Modeling and analysis in peer-to-peer botnet with virtual patching and quarantine strategy

“…A bot-master in P2P botnet recruits new vulnerable hosts (bots) to run malicious software by all kinds of attacking techniques such as Trojan, worms, and virus [2]. A host in P2P botnet can act as a bot-master and a bot, which makes the detection of P2P botnet even more di cult and the e ect of P2P botnet more harmful [3,4]. P2P botnets, such as Peacomm, Storm botnet [5], Waledac botnet [6], Miner botnet [7], Kelihos botnet [8], and Zero Access botnet [9] have emerged and gradually escalated in recent years.…”

A Critical Overview of Industrial Internet of Things Security and Privacy Issues Using a Layer-Based Hacking Scenario

“…], [76], the Sybil attack [? ], the Sinkhole attack [77], the Routing Table Poisoning attack [78], DoS attack [79], [80], the DDoS attack [80], [81], with the target being the WSN Nodes of Prime MotorX.…”