Abstract:Theoretical modeling of computer virus/worm epidemic dynamics is an important problem that has attracted many studies. However, most existing models are adapted from biological epidemic ones. Although biological epidemic models can certainly be adapted to capture some computer virus spreading scenarios (especially when the so-called homogeneity assumption holds), the problem of computer virus spreading is not well understood because it has many important perspectives that are not necessarily accommodated in the biological epidemic models. In this article, we initiate the study of such a perspective, namely that of adaptive defense against epidemic spreading in arbitrary networks. More specifically, we investigate a nonhomogeneous Susceptible-Infectious-Susceptible (SIS) model where the model parameters may vary with respect to time. In particular, we focus on two scenarios we call semi-adaptive defense and fully adaptive defense, which accommodate implicit and explicit dependency relationships between the model parameters, respectively. In the semi-adaptive defense scenario, the model’s input parameters are given; the defense is semi-adaptive because the adjustment is implicitly dependent upon the outcome of virus spreading. For this scenario, we present a set of sufficient conditions (some are more general or succinct than others) under which the virus spreading will die out; such sufficient conditions are also known as epidemic thresholds in the literature. In the fully adaptive defense scenario, some input parameters are not known (i.e., the aforementioned sufficient conditions are not applicable) but the defender can observe the outcome of virus spreading. For this scenario, we present adaptive control strategies under which the virus spreading will die out or will be contained to a desired level.

Fine-granular Simulation and Modeling of Worm Propagation Using SSFNet

Worm traffic modeling for network performance analysis

Worm Intrusion Alarm Modeling Based on Network Traffic Character

The multi-fractal nature of worm and normal traffic at individual source level

Investigation of epidemic spreading process on multiplex networks by incorporating fatal properties.

Cooperation System of Worm Detection and Quarantine in Real Time

Research and Development of Network Traffic Simulation

Modeling and Analyzing of the Interaction Between Worms and Antiworms During Network Worm Propagation

Learning the Propagation of Worms in Wireless Sensor Networks

Modeling and Analysis of Worm Propagation in IPv6 Networks

Towards Understanding Dynamics of Mobile Phone Worm Propagation Using Social Network Analysis

Modeling Epidemics Spreading on Social Contact Networks

Simulation Research on the Evolving Local World Model of Internet

Modeling and Validation of SMS Worm Propagation over Social Networks

Adaptive Epidemic Dynamics in Networks

Propagation Model of Non-scanning Active Worm in Unstructured P2P Network

Encounter-based worms: Analysis and Defense

Research of Worm-Propagation Prediction Based on Stochastic Experiment

On the Performance Evaluation of Encounter-based Worm Interactions Based on Node Characteristics

Comprehensive analysis of a stochastic wireless sensor network motivated by Black-Karasinski process

A New Worm Exploiting IPv6 and IPv4-IPv6 Dual-Stack Networks: Experiment, Modeling, Simulation, and Defense