Title
Comparison of the mean-field approach and simulation in a peer-to-peer botnet case study
Abstract
Peer-to-peer botnets, as exemplified by the Storm Worm, and the spreading phase of Stuxnet, are a relatively new threat to security on the internet: infected computers automatically search for other computers to be infected, thus spreading the infection rapidly. In a recent paper, such botnets have been modeled using Stochastic Activity Networks, allowing the use of discrete-event simulation to judge strategies for combating their spread. In the present paper, we develop a mean-field model for analyzing botnet behavior and compare it with simulations obtained from the Moebius tool. We show that the mean-field approach provides accurate and orders-of-magnitude faster computation, thus providing very useful insight in spread characteristics and the effectiveness of countermeasures.
Year
DOI
Venue
2011
10.1007/978-3-642-24749-1_11
EPEW
Keywords
DocType
Volume
recent paper,present paper,moebius tool,spread characteristic,infected computer,mean-field approach,peer-to-peer botnets,mean-field model,peer-to-peer botnet case study,stochastic activity networks,storm worm,mean field,discrete event simulation
Conference
6977
ISSN
Citations 
PageRank 
0302-9743
7
0.48
References 
Authors
15
5
Name
Order
Citations
PageRank
anna kolesnichenko1191.69
Anne Remke217523.96
Pieter-Tjerk de Boer318422.82
Boudewijn R. Haverkort41205117.45
nicolas le thomas570.48