Study of a malware propagation model in computer networks

In this paper, we present a generalized mathematical model of propagation of malware objects in computer networks which is based on the epidemic modeling of the virus in biological phenomena. In this model, we partition the network computers into five groups; Vulnerable population, Exposed population, Infectious population, Quarantined population, Recovered population. Furthermore, we can model the changes in the status of computers at a malware attack by an ordinary differential equations theory based on the general performance of anti- malware software. A nonlinear differential equation system is proposed for this model, then stability and instability of the network (in a malware attack) are investigated by qualitative theories. In addition, we show that in which conditions the network has a normal function or a potential disruption when a malware attack occurs. Also, our theoretical results are validated by the aid of numerical simulations which are based on real data of an anti-malware software in a multi-worm attack.