A Study of BotNet Diffusion Model and Effective Analysis of Network Prevention Management Strategies Using SIR Model

• Main Author: 陳坤裕
• Other Authors: 蕭漢威
• Format: Others
• Language: en_US
• Published: 2012
• Online Access: http://ndltd.ncl.edu.tw/handle/45774355476737121836

碩士 === 國立高雄大學 === 資訊管理學系碩士班 === 100 === With the rapid growth of Information technology, resources on the Internet can be coordinated in a more efficient and effective way. However, this advantage has its drawback when it is used with criminal purposes. In recent years, a new Internet threat (BotNet) has been created. BotNet incorporates the techniques of Internet worms, Trojans and agents together and brings serious disasters to Internet users. Hence, for defenders, choosing appropriate defense strategies becomes critical while defending BotNet. However, prior researches draw little attention on this question. Therefore, in this research, by describing the analogies of defense strategies between biological diseases and BotNet, two defense strategies are chosen. Through mathematical modeling and simulations, our simulation results show patching strategy performs better than barrier precaution strategy. Further, we also found the earlier the implementation, the earlier the BotNet outbreak approaches to steady state. Meanwhile, we found patch infected hosts performs better than patch susceptible hosts. Our findings not only help defenders to compare the effectiveness of defense strategies but also provide suggestions to maximum the effectiveness of deploy patching strategy. We anticipate our research to be a starting point for more sophisticated in modeling and analyzing the effectiveness of defense strategies against BotNet. For example, take economic perspective or hybrid defense strategies into account. This can help defender to have more references while defending BotNet.