Research Of The Worm Propagation Model Based On Dynamic Quarantine

With the explosive growth of network applications and complexity, the threat of Internet worms against network security becomes increasingly serious. Especially under the environment of Internet, the variety of the propagation ways and the complexity of the application environment result in worm with much higher frequency of outbreak, much deeper latency and wider coverage, and Internet worms have been a primary issue faced by malicious code researchers. Due to the fast spreading nature and great damage of Internet worms, it is necessary to implement automatic restraint measures, such as dynamic quarantine, on computer networks. The research of this thesis will be based on dynamic quarantine and provide a theory basis for researching of the worm propagation constraint strategy.On the basis of the research of existing spreading models of the worm, this thesis puts forward the worm propagation model based on dynamic quarantine:SIQV (Susceptible-Infected-Quarantined-Vaccinated) model with time delay and SIQRV (Susceptible-Infected-Quarantined susceptible hosts-Quarantined infected hosts-Vaccinated) model. The former considers the susceptible host will not immediately become infected state when it is infected by the infected host, but it will become infected state after a period of time, therefore time delay is introduced into the modeling. The latter considers the impact of anomaly detection, so both the infectious host and the susceptible host will be quarantined; and in order to avoid the user are isolated for a long time, the host will restore to the state before being isolated after it is quarantined for a period of time, thus double-quarantine strategy is introduced into the modeling.Then, this thesis analyzes the mathematical model of the two propagation models respectively and discusses their basic reproduction number. Finally, this thesis simulates the worm propagation of the two propagation models respectively. Through the experimental results, the simulation curve of SIQV model with time delay is similar to its numerical curve, the SIQV model with time delay proposed by this thesis can simulate the worm propagation more effectively. Through the experimental results, the simulation curve of SIQRV model is similar to its numerical curve, the double-quarantine strategy proposed by this thesis can restrain the spreading of the worm more effectively. Taking into account time delay and double-quarantine strategy in mathematics model and enlarging the scale of the simulation are our future work needed.