Cyber Network Resilience against Self-Propagating Malware Attacks

06/27/2022
by   Alesia Chernikova, et al.
0

Self-propagating malware (SPM) has led to huge financial losses, major data breaches, and widespread service disruptions in recent years. In this paper, we explore the problem of developing cyber resilient systems capable of mitigating the spread of SPM attacks. We begin with an in-depth study of a well-known self-propagating malware, WannaCry, and present a compartmental model called SIIDR that accurately captures the behavior observed in real-world attack traces. Next, we investigate ten cyber defense techniques, including existing edge and node hardening strategies, as well as newly developed methods based on reconfiguring network communication (NodeSplit) and isolating communities. We evaluate all defense strategies in detail using six real-world communication graphs collected from a large retail network and compare their performance across a wide range of attacks and network topologies. We show that several of these defenses are able to efficiently reduce the spread of SPM attacks modeled with SIIDR. For instance, given a strong attack that infects 97 no defense is employed, strategically securing a small number of nodes (0.08 reduces the infection footprint in one of the networks down to 1

READ FULL TEXT

page 1

page 2

page 3

page 4

research
02/09/2023

Mathematical Modeling of Cyber Resilience

We identify quantitative characteristics of responses to cyber compromis...
research
08/05/2022

Modeling Self-Propagating Malware with Epidemiological Models

Self-propagating malware (SPM) has recently resulted in large financial ...
research
10/31/2018

Improving ICS Cyber Resilience through Optimal Diversification of Network Resources

Network diversity has been widely recognized as an effective defense str...
research
01/06/2018

Using Malware Self-Defence Mechanism to Harden Defence and Remediation Tools

Malware are becoming a major problem to every individual and organizatio...
research
05/23/2019

Characterizing Certain DNS DDoS Attacks

This paper details data science research in the area of Cyber Threat Int...
research
05/30/2023

Lost at Sea: Assessment and Evaluation of Rootkit Attacks on Shipboard Microgrids

Increased dependence of the maritime industry on information and communi...
research
04/26/2020

Airmed: Efficient Self-Healing Network of Low-End Devices

The proliferation of application specific cyber-physical systems coupled...

Please sign up or login with your details

Forgot password? Click here to reset