Mitigating the Spread of a Virus in the Internet
Mitigating the Spread of a Virus in the Internet
复制标题
减少病毒在互联网上的传播
DOI：
10.1109/srdsw.2014.26
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
X. Defago
中科院分区：
文献类型：
--
作者：
T. D. Nguyen;F. Bonnet;X. Defago
病毒是互联网的一种传统而严重的威胁。病毒的传播和对传播的遏制可以概括为一个双边问题的抽象，其中一方试图尽可能多地传播感染，而另一方则试图检测和限制传播。两个参数起着重要作用：（1）成功感染的概率，（2）成功检测的概率。现有的研究分别考虑了这一问题的两个方面。他们要么在没有检测的情况下研究传播，要么在检测完全准确的情况下研究遏制。当可以检测到攻击但检测可能不准确时，自然会产生一个问题，即是否有可能遏制蔓延，如果有可能，那么在什么条件下？本文研究了双边问题的防御策略，可以分为两个主要类别，（1）杀死策略，其中一个节点决定牺牲自己，并可能停用它的一些邻居，和（2）切割策略，其中一个节点决定切断或停用一些通信链路。这两个类都旨在通过断开受感染节点与健康节点的连接来控制流行病。
Virus is a traditional and serious threat of the Internet. The spread of a virus and the containment of the spread can be generalized in an abstraction of a two-side problem in which one side tries to spread the infection as much as possible while the other side tries to detect and limit the spread. Two parameters play an important role: (1) the probability of a successful infection, (2) the probability of a successful detection. The existing studies consider both sides of this problem separately. They either study the spread without detection or study the containment when detection is perfectly accurate. A natural question that arises when attack can be detect but the detection may possibly be inaccurate, is whether it is possible to contain the spread and, if it is, then under what conditions? This paper studies the two-side problem with defense strategies that can be grouped into two main classes, (1) Killing strategies, where a node decides to sacrifice itself and possibly deactivate some of its neighbors, and (2) Cutting strategies, where a node decides to cut or deactivate some communication links. Both classes aim at containing the epidemic by disconnecting infected nodes from healthy ones.
针对各种扫描技术的有效蠕虫检测
DOI：
--
发表时间：
2006
期刊：
Journal of computing and security
影响因子：
--
作者：
Jianhong Xia;Sarma Vangala;Jiang Wu;Lixin Gao;K. Kwiat
通讯作者：
K. Kwiat