A wide variety of scanning strategies for IPv6 networks when a worm scans across subnets and inside subnets was investigated.A P2P-based mechanism for decreasing the repeated infection and implementing control strategies was discussed

and a new hybrid worm named NHIW

which can form large-scale propagation in IPv6 network

was also constructed.The NHIW can not only scan the worm randomly

but also can quickly obtain IP addresses of susceptible active hosts in the subnet as well.Furthermore

NHIW is able to prevent re-infection of the host.Through analyzing the delay in different stage of NHIW propagation and its propagation rate

a full NHIW propagation model TLWPM was established.Experimental results show that NHIW can form a flooding propagation in the IPv6 network.With respect to the features of NHIW

some relevant defense strategies were discussed finally.