|
| This Article | ||
| ||
| Share | ||
| Bibliographic References | ||
| Add to: | ||
| | ||
| Search | ||
| ||
Modeling and Simulation Study of the Propagation and Defense of Internet E-mail Worms
April-June 2007 (vol. 4 no. 2)
pp. 105-118
| ASCII Text | x | ||
| Cliff C. Zou, Don Towsley, Weibo Gong, "Modeling and Simulation Study of the Propagation and Defense of Internet E-mail Worms," IEEE Transactions on Dependable and Secure Computing, vol. 4, no. 2, pp. 105-118, April-June, 2007. | |||
| BibTex | x | ||
| @article{ 10.1109/TDSC.2007.1001, author = {Cliff C. Zou and Don Towsley and Weibo Gong}, title = {Modeling and Simulation Study of the Propagation and Defense of Internet E-mail Worms}, journal ={IEEE Transactions on Dependable and Secure Computing}, volume = {4}, number = {2}, issn = {1545-5971}, year = {2007}, pages = {105-118}, doi = {http://doi.ieeecomputersociety.org/10.1109/TDSC.2007.1001}, publisher = {IEEE Computer Society}, address = {Los Alamitos, CA, USA}, } | |||
| RefWorks Procite/RefMan/Endnote | x | ||
| TY - JOUR JO - IEEE Transactions on Dependable and Secure Computing TI - Modeling and Simulation Study of the Propagation and Defense of Internet E-mail Worms IS - 2 SN - 1545-5971 SP105 EP118 EPD - 105-118 A1 - Cliff C. Zou, A1 - Don Towsley, A1 - Weibo Gong, PY - 2007 KW - Network security KW - e-mail worm KW - worm modeling KW - epidemic model KW - simulation. VL - 4 JA - IEEE Transactions on Dependable and Secure Computing ER - | |||
As many people rely on e-mail communications for business and everyday life, Internet e-mail worms constitute one of the major security threats for our society. Unlike scanning worms such as Code Red or Slammer, e-mail worms spread over a logical network defined by e-mail address relationships, making traditional epidemic models invalid for modeling the propagation of e-mail worms. In addition, we show that the topological epidemic models presented in [1], [2], [3], and [4] largely overestimate epidemic spreading speed in topological networks due to their implicit homogeneous mixing assumption. For this reason, we rely on simulations to study e-mail worm propagation in this paper. We present an e-mail worm simulation model that accounts for the behaviors of e-mail users, including e-mail checking time and the probability of opening an e-mail attachment. Our observations of e-mail lists suggest that an Internet e-mail network follows a heavy-tailed distribution in terms of node degrees, and we model it as a power-law network. To study the topological impact, we compare e-mail worm propagation on power-law topology with worm propagation on two other topologies: small-world topology and random-graph topology. The impact of the power-law topology on the spread of e-mail worms is mixed: E-mail worms spread more quickly on a power-law topology than on a small-world topology or a random-graph topology, but immunization defense is more effective on a power-law topology.
Index Terms:
Network security, e-mail worm, worm modeling, epidemic model, simulation.
Citation:
Cliff C. Zou, Don Towsley, Weibo Gong, "Modeling and Simulation Study of the Propagation and Defense of Internet E-mail Worms," IEEE Transactions on Dependable and Secure Computing, vol. 4, no. 2, pp. 105-118, April-June 2007, doi:10.1109/TDSC.2007.1001
Usage of this product signifies your acceptance of the Terms of Use.

