A Stochastic Model of Multivirus Dynamics
A Stochastic Model of Multivirus Dynamics
复制标题
DOI：
10.1109/tdsc.2011.33
复制
发表时间：
2012
影响因子：
7.3
通讯作者：
Shouhuai Xu;Wenlian Lu;Zhenxin Zhan
中科院分区：
文献类型：
--
作者：
Shouhuai Xu;Wenlian Lu;Zhenxin Zhan
了解计算机病毒（蠕虫、攻击）的传播动态是一个重要的研究问题，受到计算机安全和统计物理学界的广泛关注。然而，以往的研究主要集中在单病毒传播动力学上。在本文中，我们研究了多病毒传播动力学，其中多个病毒试图感染计算机，同时可能相互对抗，例如，它们由多个botmaster控制。具体来说，我们提出并分析了任意网络中多病毒传播动态的一般模型（及其两种特殊情况）（即，我们不对网络拓扑结构进行任何限制），其中病毒可能存在也可能不存在于计算机上。我们的模型为解决以下问题提供了分析结果：多重病毒灭亡的充分条件（也称为流行阈值）是什么？如果一些病毒可以“抢劫”其他病毒怎么办？当病毒（大致）威力相等时，多病毒流行动力学表现出什么特征？分析结果表明，防御能力和网络连通性这两类因素之间存在着根本性的联系。这使我们能够得出各种见解，可用于指导安全防御。
Understanding the spreading dynamics of computer viruses (worms, attacks) is an important research problem, and has received much attention from the communities of both computer security and statistical physics. However, previous studies have mainly focused on single-virus spreading dynamics. In this paper, we study multivirus spreading dynamics, where multiple viruses attempt to infect computers while possibly combating against each other because, for example, they are controlled by multiple botmasters. Specifically, we propose and analyze a general model (and its two special cases) of multivirus spreading dynamics in arbitrary networks (i.e., we do not make any restriction on network topologies), where the viruses may or may not coreside on computers. Our model offers analytical results for addressing questions such as: What are the sufficient conditions (also known as epidemic thresholds) under which the multiple viruses will die out? What if some viruses can "rob” others? What characteristics does the multivirus epidemic dynamics exhibit when the viruses are (approximately) equally powerful? The analytical results make a fundamental connection between two types of factors: defense capability and network connectivity. This allows us to draw various insights that can be used to guide security defense.