论文信息 - Passive Worm Propagation Modeling and Analysis

Passive Worm Propagation Modeling and Analysis

The target selection algorithm of passive worms makes them difficult to detect, and therefore they threaten the Internet greatly. Modeling the propagation of passive worms can provide profound insight into the passive worm behavior. In this paper we present a mathematical model named as the passive worm propagation (PWP) model. Based on the two-factor model, it represents the propagation of passive worms. The simulation of the model indicates that the spread of passive worms is governed by the initial value of passive worms, the infectious rate of worms, the removal rate of worms and time delay. We also analyze the feasibility of passive worms as one kind of benign worms. To the best of our knowledge, there is no relevant model for the propagation of a passive worm. Therefore, we believe that this paper is the first attempt on modeling passive worms.

Yingyou Wen | Hong Zhao | Hanxun Zhou

[1] David Moore,et al. Code-Red: a case study on the spread and victims of an internet worm , 2002, IMW '02.

[2] Stefan Savage,et al. Inside the Slammer Worm , 2003, IEEE Secur. Priv..

[3] Dan Wu,et al. Modeling and Analysis of Worm and Killer-Worm Propagation Using the Divide-and-Conquer Strategy , 2005, ICA3PP.

[4] Jun Xu,et al. WORM vs. WORM: preliminary study of an active counter-attack mechanism , 2004, WORM '04.

[5] Vern Paxson,et al. How to Own the Internet in Your Spare Time , 2002, USENIX Security Symposium.

[6] Robert K. Cunningham,et al. A taxonomy of computer worms , 2003, WORM '03.

[7] J. Frauenthal. Mathematical Modeling in Epidemiology , 1980 .

[8] Wanlei Zhou,et al. Proceedings of the 6th international conference on Algorithms and Architectures for Parallel Processing , 2005 .

[9] George Kesidis,et al. Coupled Kermack-McKendrick Models for Randomly Scanning and Bandwidth-Saturating Internet Worms , 2005, QoS-IP.

[10] Ed Skoudis,et al. Malware: Fighting Malicious Code , 2003 .

[11] Kevin A. Kwiat,et al. Modeling the spread of active worms , 2003, IEEE INFOCOM 2003. Twenty-second Annual Joint Conference of the IEEE Computer and Communications Societies (IEEE Cat. No.03CH37428).

[12] Donald F. Towsley,et al. Code red worm propagation modeling and analysis , 2002, CCS '02.