Influence of removable devices on worm propagation under pulse quarantine strategy. Issue 4 (1st October 2016)

• Record Type: Journal Article
• Authors: Yao, Yu; Zhang, Zhao; Yang, Wei; Gao, Fu-xiang
• Is Part Of: Intelligent automation & soft computing. Volume 22:Issue 4(2016)
• Page Start: 651
• Page End: 666
• Publication Date: 2016-10-01
• Subjects: Internet worms -- Removable devices -- Pulse quarantine -- Intrusion detection system -- Simulation; Artificial intelligence -- Periodicals; Intelligent control systems -- Periodicals; 003.5
• DOI: 10.1080/10798587.2016.1152768
• Languages: English
• ISSNs: 1079-8587

Abstract

Abstract: Internet worms, a great threat to network security can spread quickly via networks. Many worms can also easily propagate via removable devices, which have become a key method for such worms to stealthily invade those computers not connected to the Internet. Therefore, it is necessary to analyze the dynamic behavior and containment strategy of such worms. By theoretical analysis and experiments, we found that the traditional constant quarantine strategy has a quite high demand on initial immunization rate, which is difficult to achieve in a real network environments. Thus, a pulse quarantine strategy is proposed to make up the deficiency of constant quarantine. Pulse quarantine adopts a hybrid intrusion detection system (IDS) integrating both misuse and anomaly IDS. By analyzing the systems' stability at infection-free equilibrium, a basic reproduction number is determined. If basic reproduction number is less than one, system will be stable, which is beneficial for us to predict worm propagation and implement containment strategy; otherwise, the system will lose its stability and worm propagation is out of control. Numerical analysis is given to illustrate our theory. Finally, simulation experiments are presented to simulate the worm propagation; the results fully demonstrate the correctness of our theoretical analysis.