A Quasi-Species Model for the Propagation and Containment of Polymorphic Worms

Authors:
Bradley Stephenson;Biplab Sikdar
Affiliations:
MITRE Corporation, McLean and Rensselaer Polytechnic Institute, Troy;Rensselaer Polytechnic Institute, Troy
Venue:
IEEE Transactions on Computers
Year:
2009

Citing 0
Cited 2

An automated worm containment scheme

WISM'10 Proceedings of the 2010 international conference on Web information systems and mining
Optimal response to attacks on the open science grid

Computer Networks: The International Journal of Computer and Telecommunications Networking

Quantified Score

Hi-index	14.98

Visualization

Abstract

Polymorphic computer worms are characterized by their ability to change their byte sequence as they replicate and propagate, thereby aiming to thwart intrusion detection systems (IDSes). In this letter, we propose a model based on coevolution of biological quasi-species to characterize the propagation of polymorphic worms and the effect of IDSes on their dynamics. The model is used to derive the conditions required for the IDS to contain the worm. The model is validated using simulations.