Title

Deriving a Closed-Form Expression for Worm-Scanning Strategies

Document Type

Article

Publication Date

7-2009

Publication Source

International Journal of Security and Networks

Volume

4

Issue

3

Inclusive pages

135-144

DOI

http://dx.doi.org/10.1504/IJSN.2009.027339

Publisher

Inderscience Publishers

Place of Publication

United Kingdom

ISBN/ISSN

1747-8405

Peer Reviewed

yes

Abstract

This work presents a closed-form expression for characterising the spread of a class of worm-scanning strategies through a mean-field approximation. This expression can both accurately capture the worm propagation speed before the number of infections becomes large and explicitly demonstrate the effects of important parameters such as the vulnerable-host distribution and the worm-scanning strategy. Experimental results verify that the closed-form expression can accurately reflect the mean value of infections over time before the infected hosts become saturated for a wide range of scanning methods including static worm-scanning strategies and self-learning worms.

Keywords

network security; worm scanning strategy; modelling; closed-form expressions; mean-field theory; worm propagation; worm infections; self-learning worms

Disciplines

Engineering

 
 

Link to Original Published Item

http://dl.acm.org/citation.cfm?id=1572186