On the malware propagation in heterogeneous networks

The paper presents results of a study of malware spreading in heterogeneous networks using epidemiological modeling framework. The model is one of the first to incorporate heterogeneity among the three components of the network: software, hardware and network type. This model also allows for both cyber and non-cyber-related impact on the mission. The unified approach taken in this study aggregates and extends models of malware spreading that either do not account for network heterogeneity or allow for heterogeneity within one component, e.g. software. A system of ordinary differential equations is solved numerically to identify temporal dependence of the number of vulnerable and compromised devices of different types. Parametrization of the model assumes multiple factors, including infection rate depending on number of common devices, software to execute common types of shared files, and frequency of synchronization. We conducted sensitivity analysis to identify the range of parameters critical to behavior of the system. The paper concludes with a discussion of future extension of the model allowing for incorporation of human factors, uncertainty, and spatial and temporal components describing dynamic changes during an active mission (e.g. network size, reconfiguration).