Dynamic Control of Worm Propagation

  • Authors:
  • Ram Dantu;João Cangussu;Arun Yelimeli

  • Affiliations:
  • -;-;-

  • Venue:
  • ITCC '04 Proceedings of the International Conference on Information Technology: Coding and Computing (ITCC'04) Volume 2 - Volume 2
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

In a computer network, network security isaccomplished using elements like firewalls, hosts,servers, routers, intrusion detection systems, andhoney pots. These network elements need to know thenature or anomaly of the worm in priori to detect theattack. Modern day viruses like Code red, Sapphireand Nimda spread very fast. For example, Sapphirecan double its size and infect more than 90% of thevulnerable hosts within 10 minutes. Therefore it isimpractical if not impossible for human mediatedresponses to these modern day fast spreading viruses.Several epidemic studies show that automatictracking of resource usage and control is an effectivemethod in containing the damage. In this paper wepropose a state space feedback control model todetect and control the spread of these viruses bymeasuring the number of connections an infectedhost makes.The objective of the mechanism is to slowdown the spreading velocity of a worm by controlling(delaying) the total number of connections made byan infected host. As expected, the model showed thatthe sooner the infection is detected the faster thereduction of the spreading velocity. Additionally, thedeployment of a controller at different levels (hostand firewall) has shown to be very promising.