A Risk Management Approach to Double-Virus Tradeoff Problem

Abstract

One of the major threats to cybersecurity is the emergence of new computer viruses. By emergence of new viruses, the cybersecurity companies assign a team of security experts and programmers to study the behavior of the virus and develop the corresponding antivirus program to secure networks. Sometimes, more than one new virus is identified that requires the cybersecurity team to make a tradeoff on the allocation of programmers, and thus leads to two-antivirus-program development problem under doublevirus attack. In this paper, we propose DOWNHILL algorithm to address the outlined challenge. We model the time evolution of the expected state of the network as a differential dynamical system to measure the total loss caused by the viruses. Then, we propose a DOWNHILL algorithm, three heuristic algorithms and a random algorithm to solve the problem, respectively. We study the computational complexities of the proposed algorithms as well. Through numerous comparative experiments, we confirm the DOWNHILL algorithm is the most effective method to this problem. Finally, the influence of different factors on the DOWNHILL strategy and its potential total loss are also researched.INDEX TERMS Computer virus, antivirus, dynamic model, constrained optimization.

A Pareto Front Transformation Model for Multi-objective-based Constrained Optimization

“…C ONSTRAINED optimization problems (COPs) are ubiquitous in scientific research and engineering applications, i.e., airport gate assignment problem [1], antenna design problem [2], cybersecurity problem [3], image processing problem [4]. They present serious challenges to existing optimization methods.…”

A Cost-Effective Algorithm for Selecting Optimal Bandwidth to Clear Malicious Codes

“…Cybersecurity companies, whose main responsibility is to secure the cyberspace, can detect new malicious codes by analyzing data and reports collected from network users. After malicious codes are detected, cybersecurity companies have to develop the corresponding antivirus programs, which are a special kind of computer programs used to prevent and remove malicious codes [4], [5]. Bandwidth is the amount of data that can be transmitted in a fixed amount of time, usually measured by Mbps.…”