• DocumentCode
    1600928
  • Title

    Modeling malware spreading dynamics

  • Author

    Garetto, Michele ; Gong, Weibo ; Towsley, Don

  • Author_Institution
    Dipt. di Elettronica, Politecnico di Torino, Italy
  • Volume
    3
  • fYear
    2003
  • Firstpage
    1869
  • Abstract
    In this paper we present analytical techniques that can be used to better understand the behavior of malware, a generic term that refers to all kinds of malicious software programs propagating on the Internet, such as e-mail viruses and worms. We develop a modeling methodology based on Interactive Markov Chains that is able to capture many aspects of the problem, especially the impact of the underlying topology on the spreading characteristics of malware. We propose numerical methods to obtain useful bounds and approximations in the case of very large systems, validating our results through simulation. An analytic methodology represents a fundamentally important step in the development of effective countermeasures for future malware activity. Furthermore, we believe our approach can help to understand a wide range of "dynamic interactions on networks", such as routing protocols and peer-to-peer applications.
  • Keywords
    Internet; Markov processes; computer viruses; network topology; numerical analysis; Interactive Markov Chains; Internet; e-mail viruses; e-mail worms; malicious software program; malware behavior; network dynamic interaction; numerical method; peer-to-peer application; routing protocol; simulation; Application software; Computer science; Computer viruses; Computer worms; Electronic mail; Internet; Peer to peer computing; Routing protocols; Topology; Viruses (medical);
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    INFOCOM 2003. Twenty-Second Annual Joint Conference of the IEEE Computer and Communications. IEEE Societies
  • ISSN
    0743-166X
  • Print_ISBN
    0-7803-7752-4
  • Type

    conf

  • DOI
    10.1109/INFCOM.2003.1209209
  • Filename
    1209209