Peer-to-peer botnets, as exemplified by the Storm Worm, and the spreading phase of Stuxnet, are a relatively new threat to security on the internet: infected computers automatically search for other computers to be infected, thus spreading the infection rapidly. In a recent paper, such botnets have been modeled using Stochastic Activity Networks, allowing the use of discrete-event simulation to judge strategies for combating their spread. In the present paper, we develop a mean-field model for analyzing botnet behavior and compare it with simulations obtained from the Moebius tool. We show that the mean-field approach provides accurate and orders-of-magnitude faster computation, thus providing very useful insight in spread characteristics and the effectiveness of countermeasures. © 2011 Springer-Verlag.
CITATION STYLE
Kolesnichenko, A., Remke, A., De Boer, P. T., & Haverkort, B. R. (2011). Comparison of the mean-field approach and simulation in a peer-to-peer botnet case study. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 6977 LNCS, pp. 133–147). https://doi.org/10.1007/978-3-642-24749-1_11
Mendeley helps you to discover research relevant for your work.