Sciweavers

Share
WORM
2003

Worm propagation modeling and analysis under dynamic quarantine defense

9 years 3 months ago
Worm propagation modeling and analysis under dynamic quarantine defense
Due to the fast spreading nature and great damage of Internet worms, it is necessary to implement automatic mitigation, such as dynamic quarantine, on computer networks. Enlightened by the methods used in epidemic disease control in the real world, we present a dynamic quarantine method based on the principle “assume guilty before proven innocent” — we quarantine a host whenever its behavior looks suspicious by blocking traffic on its anomaly port. Then we will release the quarantine after a short time, even if the host has not been inspected by security staffs yet. We present mathematical analysis of three worm propagation models under this dynamic quarantine method. The analysis shows that the dynamic quarantine can reduce a worm’s propagation speed, which can give us precious time to fight against a worm before it is too late. Furthermore, the dynamic quarantine will raise a worm’s epidemic threshold, thus it will reduce the chance for a worm to spread out. The simulati...
Cliff Changchun Zou, Weibo Gong, Donald F. Towsley
Added 01 Nov 2010
Updated 01 Nov 2010
Type Conference
Year 2003
Where WORM
Authors Cliff Changchun Zou, Weibo Gong, Donald F. Towsley
Comments (0)
books