Abstract:

By introducing the effects of user behavior and network topology, a novel emailworm propagation simulation algorithm is presented. Also a practical simulation environment is established based on EnronEmailDataset for emailworm propagation simulation. Simulation results show that the proposed algorithm can describe the emailworm propagation behavior accurately. The impacts of network topology on emailworm propagation are analyzed and we found that the infected keynodes can speed up the worm propagation. Also four protection strategies are proposed and examined through experiments. Results show that the imposed protections on keynode can slower the worm propagation. Furthermore, a new emailworm propagation model, named TopoSIS, is built. Compared with the simulation results, this new model can predict the size of affected users accurately.

Key words: computer system organization, email worm propagation simulation, network topology, user behavior