CC2: Defending Hybrid Worm on Mobile Networks with Two-Dimensional Circulation Control

Hailu Yang,Guanglu Sun,Xiaoyu Ding,Yu Xin,Deyun Chen

doi:10.1155/2019/9057531

Hailu Yang, Guanglu Sun + Show 3 more

Open Access

https://doi.org/10.1155/2019/9057531

Copy DOI

Abstract

As the hybrid worm can propagate by both personal social interactions and wireless communications, it has been identified as one of the most severe threats to the mobile Internet. This problem is expected to become worse with the boom of social applications and mobile services. In this work, we study the propagation dynamics of hybrid worms and propose a systematic countermeasure. The system maintains a set of community structure which describes the high-speed infection zone of worms and contains worm propagation by distributing the worm signature to the guard nodes selected from the periphery of each community. For those nodes that are geographically close but located in different communities , we evaluate the communication security between them based on the observed infection history and limit communications between insecure ones to avoid the worm spreading across communities. We also design an efficient worm signature forwarding strategy that enables most nodes in the network to reach an immune state before being infected by the worm. Extensive real-trace driven simulations verify the feasibility and effectiveness of the proposed methods.

Highlights

With the rapid deployment of mobile Internet technology, smartphone-based social services such as Facebook, Wechat, and LinkedIn have already reached billions of registered users, many of whom choose to incorporate those services into their work and family life
E system maintains a set of community structure which describes the high-speed infection zone of worms and contains worm propagation by distributing the worm signature to the guard nodes selected from the periphery of each community. For those nodes that are geographically close but located in di erent communities, we evaluate the communication security between them based on the observed infection history and limit communications between insecure ones to avoid the worm spreading across communities
A long-range worm can replicate itself and infect all smartphones whose identi ers are stored in the infected smartphone’s contact list, a delocalized propagation mode based on social relations in the social information networks. e SINs worm is similar to the one observed in Multimedia Messaging Service (MMS), both of which exhibit the characteristics of slow start

Summary

Introduction

With the rapid deployment of mobile Internet technology, smartphone-based social services such as Facebook, Wechat, and LinkedIn have already reached billions of registered users, many of whom choose to incorporate those services into their work and family life. The short-range worm infects all Bluetooth or Wi-Fi opened devices within the infection radius, which exhibits a spatial propagation pattern similar to the case of the contact-based disease [3] Such kinds of infections rely on peer-to-peer communications between sensors with geographical adjacency, which build a geographic interaction networks (short for GINs). E first one is the SINs containment unit which aims to solve the secondary forwarding caused by acquaintances based on the fact that the propagation of the worm on social networks mainly depends on the closeness of social relationships. Another one is the GINs feedback unit.

Related Works

Propagation Dynamics of the Hybrid Worm

Containment Scheme of the Hybrid Worm

System Description

Experiments and Analyses