Title

A Closed-Form Expression for Static Worm-Scanning Strategies

Document Type

Presentation

Presentation Date

5-2008

Conference Name

Proceedings of IEEE International Conference on Communication (ICC 2008

Conference Location

Beijing, China

Source of Publication

Communications, 2008. ICC '08.

Publisher

IEEE

Inclusive pages

1573-1577

Peer Review

Yes

Abstract

This work presents a closed-form expression for characterizing the spread of static worm-scanning strategies through a mean-field approximation. Our model can both accurately capture the worm propagation speed before the number of infections becomes large and explicitly demonstrate the effects of important parameters such as the vulnerable-host distribution and the worm-scanning strategy. Our approach is based on the mean-field theory that investigates the average number of infected hosts over time. Experiments are carried out based on the parameters chosen from the Witty worm. Experimental results verify that the closed-form expression can accurately reflect the mean value of infections over time before the infected hosts become saturated for a wide range of scanning methods. Therefore, our model can help defenders design better detection and defense systems and provide a stepping stone towards obtaining closed-form expressions for the propagation of dynamic worm-scanning strategies.

Keywords

Invasive software, Chaotic communication, Closed-form solution, Communications Society, Computer worms, Equations, Humans, Internet, Probes, Security, Stochastic processes

Disciplines

Engineering