Title: An agent-based model to simulate coordinated response to malware outbreak within an organisation

Authors: Jonathan Pan; Chun Che Fung

Addresses: School of Information Technology, Murdoch University, Murdoch WA 6150, Australia ' School of Information Technology, Murdoch University, Murdoch WA 6150, Australia

Abstract: Malware is a major threat to organisations. It affects business continuity and induces risks to organisations. Current anti-malware solutions are challenged to keep the risks at bay. When a malware manages to penetrate an organisation's defences, there is a need to quickly contain the malware and to keep control over the organisation's IT assets before the risk escalates. In such incident, incident responders need to effectively carry out their containment plan. An ineffective containment plan will induce greater risks. Such infiltration can spread like a biological epidemic outbreak. These epidemic-like outbreaks can be modelled using mathematical models. However there are no models to assess the effectiveness of incident response plan. Additionally, there are many variable considerations that the incident response plan would need to factor in. This research paper proposes the use of an agent-based model to model containment response plan to minimise the impact of a malware outbreak.

Keywords: malware containment; agent-based modelling; epidemiological modelling; response planning; agent-based systems; simulation; coordinated response; multi-agent systems; MAS; malware threats; security threats; business continuity; risk management; mathematical modelling.

DOI: 10.1504/IJICS.2012.051777

International Journal of Information and Computer Security, 2012 Vol.5 No.2, pp.115 - 131

Published online: 29 Jan 2013 *

Full-text access for editors Access for subscribers Purchase this article Comment on this article