Sciweavers

SPRINGSIM
2007

Modeling and analysis of worm defense using stochastic activity networks

13 years 4 months ago
Modeling and analysis of worm defense using stochastic activity networks
— Stochastic activity networks (SANs) are a widely used formalism for describing complex systems that have random behavior. Sophisticated software tools exist for the modeling and analysis of systems described within a SAN framework. This paper presents a SAN model of a local area network’s defense against Internet worm propagation, measuring the effectiveness of a defensive strategy based on removing hosts from the local network once an infection is detected. We consider the problem of deciding whether to allocate resources to remove an infected host (and thereby reduce the threat), or remove a susceptible but as-yet uninfected host, to directly save it from attack. Considering a parameterized range of policies that makes this decision based on the number of infections in the local network, we find marked preference for always removing one type of hosts when possible, over the other, regardless of the infection state. We futhermore see whether preference should be given to infect...
David M. Nicol, Steve Hanna, Frank Stratton, Willi
Added 07 Nov 2010
Updated 07 Nov 2010
Type Conference
Year 2007
Where SPRINGSIM
Authors David M. Nicol, Steve Hanna, Frank Stratton, William H. Sanders
Comments (0)