Computer worm ecology in encounter-based networks

Abstract— Encounter-based network is a frequentlydisconnected wireless ad-hoc network requiring immediate neighbors to store and forward aggregated data for information disseminations. Using traditional approaches such as gateways or firewalls for deterring worm propagation in encounter-based networks is inappropriate. Because this type of network is highly dynamic and has no specific boundary, we need a fully distributed security response mechanism. We propose the worm interaction approach that relies upon automated beneficial worm generation aiming to alleviate problems of worm propagations in such networks. This work is motivated by the ‘War of the Worms’ of the Internet worms between competing worms such as NetSky, Bagle and MyDoom. To understand the dynamic of worm interactions and its performance, we mathematically model several classes of worms and interactions using ordinary differential equations and analyze their behaviors.

• Type: Conference
• Year: 2007
• Where: BROADNETS
• Authors: Sapon Tanachaiwiwat, Ahmed Helmy
• Keywords: BROADNETS 2007, Computer Networks, Worm, Worm Interactions, Worm Propagations