A Closed-Form Expression for Static Worm-Scanning Strategies
Proceedings of IEEE International Conference on Communication (ICC 2008
Source of Publication
Communications, 2008. ICC '08.
This work presents a closed-form expression for characterizing the spread of static worm-scanning strategies through a mean-field approximation. Our model can both accurately capture the worm propagation speed before the number of infections becomes large and explicitly demonstrate the effects of important parameters such as the vulnerable-host distribution and the worm-scanning strategy. Our approach is based on the mean-field theory that investigates the average number of infected hosts over time. Experiments are carried out based on the parameters chosen from the Witty worm. Experimental results verify that the closed-form expression can accurately reflect the mean value of infections over time before the infected hosts become saturated for a wide range of scanning methods. Therefore, our model can help defenders design better detection and defense systems and provide a stepping stone towards obtaining closed-form expressions for the propagation of dynamic worm-scanning strategies.
Invasive software, Chaotic communication, Closed-form solution, Communications Society, Computer worms, Equations, Humans, Internet, Probes, Security, Stochastic processes
Z. Chen and Chao Chen (2008).
A Closed-Form Expression for Static Worm-Scanning Strategies. Communications, 2008. ICC '08.. 1573-1577. IEEE.Presented at Proceedings of IEEE International Conference on Communication (ICC 2008, Beijing, China.