Limitations of Scanned Human Copresence Encounters for Modelling Proximity-Borne Malware

James Mitchell, Eamonn O'Neill, G Zyba, G M Voelker, M Liljenstam, A Mehes, P Johansson

Research output: Chapter or section in a book/report/conference proceedingChapter or section

3 Citations (SciVal)
222 Downloads (Pure)

Abstract

Patterns of human encounters, which are difficult to observe directly, are fundamental to the propagation of mobile malware aimed at infecting devices in spatial proximity. We investigate errors introduced by using scanners that detect the presence of devices on the assumption that device copresence at a scanner corresponds to a device encounter. We show in an ideal static model that only 59% of inferred encounters correspond to actual device copresence. To investigate the effects of mobility, we use a simulator to compare encounters between devices with those inferred by scanners. We show that the statistical properties of scanned encounters differ from actual device encounters in ways which impact malware propagation dynamics, a form of aggressive data dissemination. In addition to helping us understand the limitations of encounter data gathered by scanners in the field, our use of virtual scanners suggests a practical method for using these empirical datasets to better inform simulations of proximity malware outbreaks and similar data dissemination applications.
Original languageEnglish
Title of host publication2012 4th International Conference on Communication Systems and Networks, COMSNETS 2012
PublisherIEEE
ISBN (Print)9781467302982
DOIs
Publication statusPublished - 2012

Fingerprint

Dive into the research topics of 'Limitations of Scanned Human Copresence Encounters for Modelling Proximity-Borne Malware'. Together they form a unique fingerprint.

Cite this