PID:A QueueManagement SchemeforImproving NetworkResilience Under WormAttacks

Inthis paper; wepropose PID(PerInefficiency Dropping), aqueuemanagement scheme that cannotonly preserve bandwidth fornormal traffic whenawormisspreadingfast butalsosignificantly reduce thespreading rateof theworm.PIDpreferentially drops packets ofinefficient applications that generate large numbers ofinvalid packets according tothebandwidth impact oftheinvalid packets. Thusbandwidth canbepreserved fornormalefficient applications. Simulations showthat PIDcansignificantly slowthe propagation ofscanning worms. Theyalso showthat worm traffic onlyhaslimited impact onnormal traffic evenafter allvulnerable nodes inthesimulated network havebeeninfected.