CC BY
0Hindawi Publishing Corporation Discrete Dynamics in Nature and Society Volume 2012, Article ID 106950,8 pages doi:10.1155/2012/106950
Research Article
Propagation of Computer Virus under Human Intervention: A Dynamical Model
Chenquan Gan,1,2 Xiaofan Yang,1,2 Wanping Liu,1 Qingyi Zhu,1 and Xulong Zhang1
1 College of Computer Science, Chongqing University, Chongqing 400044, China
2 School of Electronic and Information Engineering, Southwest University, Chongqing 400715, China
Correspondence should be addressed to Xiaofan Yang, xLyang1964@yahoo.com Received 13 May 2012; Accepted 7 June 2012 Academic Editor: Yanbing Liu
Copyright © 2012 Chenquan Gan et al. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
This paper examines the propagation behavior of computer virus under human intervention. A dynamical model describing the spread of computer virus, under which a susceptible computer can become recovered directly and an infected computer can become susceptible directly, is proposed. Through a qualitative analysis of this model, it is found that the virus-free equilibrium is globally asymptotically stable when the basic reproduction number R0 < 1, whereas the viral equilibrium is globally asymptotically stable if R0 > 1. Based on these results and a parameter analysis, some appropriate measures for eradicating the spread of computer virus across the Internet are recommended.
1. Introduction
Due to their striking features such as destruction, polymorphism, and unpredictability [1, 2], computer viruses have come to be one major threat to our work and daily life [3, 4]. With the rapid advance of computer and communication technologies, computer virus programs are becoming increasingly sophisticated so that developing antivirus software is becoming increasingly expensive and time-consuming [5]. Dynamical modeling of the spread process of computer virus is an effective approach to the understanding of behavior of computer viruses because, on this basis, some effective measures can be posed to prevent infection. In the past decade or so, a number of epidemic models (SEIR model [6,7], SEIRS model [8], SIRS model [9-15], SEIQV model [16], SEIQRS model [17] and SAIR model [4], were simply borrowed to depict the spread of computer virus.
In reality, human intervention plays an important role in slowing down the propagation of computer viruses or preventing the breakout of computer viruses, under which a susceptible computer can become recovered directly, and an infected computer can become
susceptible directly. To our knowledge, however, all the previous models did not consider the effect of human intervention.
In this paper, a new computer virus propagation model, which incorporates the above mentioned effects of human intervention, is proposed. The dynamics of this model are investigated. Specifically, the virus-free equilibrium is globally asymptotically stable when the basic reproduction number R0 < 1, whereas the viral equilibrium is globally asymptotically stable if Ro > 1. Based on these results and a parameter analysis, some effective strategies for eradicating computer viruses are advised.
The subsequent materials of this paper are organized as follows: Section 2 formulates the model; Section 3 shows the global stability of the virus-free equilibrium; Section 4 proves the global stability of the viral equilibrium; Some policies are posed in Section 5 for controlling virus spread; finally, this work is summarized in Section 6.
2. Assumptions and Model Formulation
At any given time, computers all over the world are classified as internal or external depending on whether it is currently accessing to the Internet or not, and all internal computers are further categorized into three classes: (1) susceptible computers, that is, virus-free computers having no immunity; (2) infected computers; (3) recovered computers, that is, virus-free computers having immunity. At time t, let S(t), I(t), and R(t) denote the concentrations (i.e., percentages) of susceptible, infected, and recovered computers in all internal computers, respectively. Then S(t) + I(t) + R(t) = 1. Without ambiguity, S(t), I(t), and R(t) will be abbreviated as S, I, and R, respectively.
Our model is based on the following assumptions.
(A1) All newly accessed computers are virus-free. Furthermore, due to the effect of newly accessed computers, at any time the percentage of susceptible computers increases by 6.
(A2) At any time an internal computer is disconnected from the Internet with probability 6.
(A3) Due to the effect of previously infected computers, at any time the percentage of infected computers increases by ¡¡SI, where ¡5 is a positive constant.
(A4) Due to the effect of cure, at any time an infected computer becomes recovered with probability ji, or becomes susceptible with probability y2.
(A5) Due to the loss of immunity, at any time a recovered computer becomes susceptible with probability a2.
(A6) Due to the availability of new vaccine, at any time a susceptible computer becomes recovered with probability a1I.
This collection of assumptions can be schematically shown in Figure 1, from which one can derive the following model describing the propagation of computer virus:
S = 6 - a1SI - 6S + y2I - ¡¡SI + a2R,
I = ¡¡SI - y2I - 6I - Y1I, (2.1)
R = Y1I + a1SI - 6R - a2R,
with initial conditions S(0) > 0, I(0) > 0 and R(0) > 0.
Figure 1: The transfer diagram of the SIRS model.
The basic reproduction number, R0, is defined as the average number of susceptible computers that are infected by a single infected computer during its life span. From the above model, one can derive the basic reproduction number R0 as
Yi + Y2 + ô
Because S +I + R = 1, system (2.1) simplifies to the following planar system:
S = ô - aiSI - ôS + Y2I - PSI + a2(l - S - I), I = pSI - Y2I - ôI - YiI,
with initial conditions S(0) > 0 and I(0) > 0. Clearly, the feasible region for this system is ^ = {(S,I) : S > 0,I > 0,S + I < l}, which is positively invariant.
3. The Virus-Free Equilibrium and Its Stability
System (2.3) always has a virus-free equilibrium E°(1,0). Next, let us consider its global stability by means of the Direct Lyapunov Method.
Theorem 3.1. E0 is globally asymptotically stable with respect to Q. if R0 < 1. Proof. Let V(t) = I(t), then
v '(01(2.3) = I = PSI - Y2I - ÔI - Yi I
= PI(S - )
= P^S - R0
Because R0 < l and S + I < l, we have V'(i)|(3) < 0. Moreover, V'(t)\(3) = 0 if and only if (S, I) = (l, 0). Thus, the claimed result follows from the LaSalle Invariance Principle. □
Figure 2: Evolutions of S(t) and I(t) for the system with p = 0.3, 5 = 0.1, a1 = 0.2, a2 = 0.4, ji = 0.1 and Y2 = 0.2, provided S(0) = 0.5 and I(0) = 0.4.
Example 3.2. Consider a system of the form (2.3) and with p = 0.3, 5 = 0.1, a1 = 0.2, a2 = 0.4, Yi = 0.1, and y2 = 0.2. Then R0 = 0.75 < 1. By Theorem 3.1, the virus-free equilibrium is globally asymptotically stable. Figure 2 demonstrates how S(t) and I(t) evolve with time t if S(0) = 0.5 and I(0) = 0.4.
4. The Viral Equilibrium and Its Stability
When R0 > 1, it is easy to verify that system (2.3) has a unique viral equilibrium E*(S*,I*), where
S* = 5 + I + Y2 = -L, I * = (5 ; a2)(R0 - l) > 0. (4.1)
p R0 «1 + (5 + Y1 + a2) R0 v '
First, consider the local stability of E*. Theorem 4.1. E* is locally asymptotically stable if R0 > 1.
Proof. For the linearized system of system (2.3) at E*, the corresponding Jacobian matrix is
/-«2 - 5 - (a1 + p)I* -(a2 + Y1 + 5 + a1S*)\ je* = ). (4.2)
V PI* 0 ) y '
The characteristic equation of JE* is
I2 + fca + k2 = 0, (4.3)
Discrete Dynamics in Nature and Society where
k1 = (a1 + p)I* + a2 + 6> 0,
^ (4.4)
k2 = fa + Yi + 6 + ttiS*)pI* > 0.
It follows from the Hurwitz criterion that the two roots of (4.3) have negative real parts. Hence, the claimed result follows. □
We are ready to study global stability of E*. Let Q' = Q - E0, then we have as following.
Theorem 4.2. E* is globally asymptotically stable with respect to Q' if R0 > 1.
Proof. From system (2.3), we have
6 - aiS*I*- 6S* + Y2I*- pS*I* + «2(1 - S*- I*) = 0. (4.5)
Note that
i («2 - Y2 \ , i («2 + Yi + 6 \
p\— + ai) +1 = -p\—s*— + ai) >0. (4.6)
Define the Lyapunov function as
p S c* p I t*
v(t) = Zzl.dx + (d + 1) dx, (4.7)
J s* x J I* x
where d = (i/p)((a2 - Y2)/S* + ai). Then
V'(t)|(2.3)=(1 - S)S + (d + i)(1 - Iy
= (1 - Ss) [6 - ai SI - 6S + Y2I - pSI + «2(i - s -1)]
+ (d + 1) (i - I) (pSI - Y2I - 6I - YiI) = ( i - Ss) [6 - ai SI - 6S + Y2I - pSI + «2(i - S -1)]
+ (d +i)( i -1) (1 - S)pSI
Discrete Dynamics in Nature and Society - S) [a\S*r - at SI + 6(S* - S) + y?(I -1*)
+ai(S* - S) + a2(I* - I) + pdSI + pdS*I* - p(d + 1)SI*] (l - S) (S* - S) (at I * + 6 + a2 + pI*) + (I -1*) (pd - ai) ( S - ^f-a; )
" (6 + a2 + pr-^1 + -2__l21* + aiI •).
If a2 < y2, because pI* + ((a2 - j2)/S*)I* = ((a2 + jt + 6)/S*)I* > 0, thus
6 + a2 + pI*- a2ST21 + a2--21* + aI > 0. (4.9)
If a2 > y2, from (4.5) we get
a2 - T2„ „ TA S*
(s + a2 + pI* + a2SY21* + aiI*^
a2 - Y2 a2 - T2„ , _ TA S*
= (d + a2 + pI* + a2--*Y21* + at I*^
a2 - Y2
(4.i0)
+ [6 - aiS*I* - 6S* + Y21* - pS*I* + a2(1 - S* -1*)] >i>I.
a2 - J2
Hence, we have
6 + a2 + pI*- ^ST2 I + 1* + aiI* > 0. (4.ii)
Furthermore, it is easy to see that V (t)|(23) < 0,and V'(t)|(23) = Oifand only if (S,I) = (S*,I*). Hence, the claimed result follows from the LaSalle invariance principle. □
Example 4.3. Consider a system of the form (2.3) and with p = 0.3, 6 = 0.i, ai = 0.2, a2 = 0.4, Yi = 0.i, and y2 = 0.05. Then R0 = i.2 > i. It follows from Theorem 4.2 that the viral equilibrium is globally asymptotically stable. Figure 3 displays how S(t) and I(t) evolve with time t if S(0) = 0.5 and I(0) = 0.4.
5. Discussions
As was indicated in the previous two sections, in order to eradicate computer viruses, one should take actions to keep R0 below one.
« 0.4
100 Time t
Figure 3: Evolutions of S(t) and I(t) for the system with p = 0.3, 6 = 0.1, a1 = 0.2, a2 = 0.4, j1 = 0.1, and j2 = 0.05, provided S(0) = 0.5 and I(0) = 0.4.
From (2.2), it is easy to see that R0 is increasing with ¡5, and is decreasing with ji, J2, and 6, respectively. This implies that prevention is more important than cure, and higher disconnecting rate from the Internet contributes to the suppression of virus diffusion.
As a consequence, it is highly recommended that one should regularly update the antivirus software even if their computer is not noticeably infected, and timely disconnect the computer from the Internet whenever this connection is unnecessary. Also, filtering and blocking suspicious messages with firewall is rewarding.
6. Conclusions
By considering the possibility that an infected computer becomes susceptible as well as the possibility that a susceptible computer becomes recovered, a new computer virus propagation model has been proposed. The dynamics of this model has been fully studied. On this basis, some effective measures for controlling the spread of computer viruses across the Internet have been posed.
Acknowledgment
The authors are greatly indebted to the anonymous reviewers for their valuable suggestions. This work is supported by the Natural Science Foundation of China (Grant no. 10771227), the Doctorate Foundation of Educational Ministry of China (Grant no. 20110191110022), and the Research Funds for the Central Universities (Grant nos. CDJXS12180007 and CDJXS10181130).
References
[1] F. Cohen, "Computer virus: theory and experiments," Computers & Security, vol. 6, pp. 22-35,1987.
[2] F. Cohen, A Short Course on Computer Viruses, John Wiley & Sons, New York, NY, USA, 2nd edition, 1994.
[3] P. J. Denning, Computers Under Attack, Addison-Wesley, Reading, Mass, USA, 1990.
[4] J. R. C. Piqueira and V. O. Araujo, "A modified epidemiological model for computer viruses," Applied Mathematics and Computation, vol. 213, no. 2, pp. 355-360, 2009.
[5] P. S. Tippett, "The kinetics of computer viruses replication: a theory and preliminary survey, in: safe computing," in Proceedings of the 4th Annual Computer Virus and Security Conference, pp. 66-87, New York, NY, USA, March 1991.
[6] B. K. Mishra and S. K. Pandey, "Dynamic model of worms with vertical transmission in computer network," Applied Mathematics and Computation, vol. 217, no. 21, pp. 8438-8446, 2011.
[7] H. Yuan and G. Q. Chen, "Network virus-epidemic model with the point-to-group information propagation," Applied Mathematics and Computation, vol. 206, no. 1, pp. 357-367, 2008.
[8] B. K. Mishra and D. K. Saini, "SEIRS epidemic model with delay for transmission of malicious objects in computer network," Applied Mathematics and Computation, vol. 188, no. 2, pp. 1476-1482, 2007.
[9] X. Han and Q. L. Tan, "Dynamical behavior of computer virus on internet," Applied Mathematics and Computation, vol. 217, no. 6, pp. 2520-2526, 2010.
[10] A. Lahrouz, L. Omari, D. Kiouach, and A. Belmaati, "Complete global stability for an SIRS epidemic model with generalized non-linear incidence and vaccination," Applied Mathematics and Computation, vol. 218, pp. 6519-6525, 2012.
[11] B. K. Mishra and N. Jha, "Fixed period of temporary immunity after run of anti-malicious software on computer nodes," Applied Mathematics and Computation, vol. 190, no. 2, pp. 1207-1212, 2007.
[12] B. K. Mishra and S. K. Pandey, "Fuzzy epidemic model for the transmission of worms in computer network," Nonlinear Analysis: Real World Applications, vol. 11, no. 5, pp. 4335-4341, 2010.
[13] J. Ren, X. Yang, L. X. Yang, Y. Xu, and F. Yang, "A delayed computer virus propagation model and its dynamics," Chaos, Solitons & Fractals, vol. 45, no. 1, pp. 74-79, 2012.
[14] J. Ren, X. Yang, Q. Zhu, L. X. Yang, and C. Zhang, "A novel computer virus model and its dynamics," Nonlinear Analysis: Real World Applications, vol. 13, no. 1, pp. 376-384, 2012.
[15] C. Vargas-De-Leon, "On the global stability of SIS, SIR and SIRS epidemic models with standard incidence," Chaos, Solitons & Fractals, vol. 44, pp. 1106-1110, 2011.
[16] F. W. Wang, Y. K. Zhang, C. G. Wang, J. F. Ma, and S. J. Moon, "Stability analysis of a SEIQV epidemic model for rapid spreading worms," Computers & Security, vol. 29, no. 4, pp. 410-418, 2010.
[17] B. K. Mishra and N. Jha, "SEIQRS model for the transmission of malicious objects in computer network," Applied Mathematical Modelling, vol. 34, no. 3, pp. 710-715, 2010.
Copyright of Discrete Dynamics in Nature & Society is the property of Hindawi Publishing Corporation and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use.
