[Paper Review] New generation of mobile phone viruses and corresponding countermeasures

Pu Wang, Marta C. González+2 more|arXiv (Cornell University)|Dec 14, 2010

Opportunistic and Delay-Tolerant Networks12 references4 citations

TL;DR

This paper investigates hybrid mobile phone viruses that combine scanning and topological spreading via MMS, showing they pose a greater threat than purely topological viruses. It proposes two countermeasures—reducing the market share of vulnerable operating systems and enhancing monitoring to limit MMS message frequency—demonstrating that both strategies significantly curtail virus propagation in simulated networks.

ABSTRACT

The fast growing market for smart phones coupled with their almost continuous online presence makes these devices the new targets of virus writers. It has been recently found that the topological spread of MMS (Multimedia Message Services) viruses is highly restricted by the underlying fragmentation of the call graph. In this paper, we study MMS viruses under another type of spreading behavior: scanning. We find that hybrid MMS viruses including some level of scanning are more dangerous to the mobile community than their standard topological counterparts. However, the effectiveness of both scanning and topological behaviors in MMS viruses can generally be limited by two controlling methods: (i) decreasing susceptible handsets' market share (OS it runs) and (ii) improving monitoring capacity to limit the frequency in which MMS messages can be sent by the mobile viruses.

Motivation & Objective

• To analyze the threat posed by new-generation mobile phone viruses that use both scanning and topological spreading via MMS.
• To understand how hybrid viruses outperform standard topological viruses in spreading efficiency.
• To evaluate the effectiveness of two control strategies: reducing susceptible device market share and limiting MMS message frequency.
• To model and simulate virus propagation under different network topologies and control mechanisms.

Proposed method

• The study models MMS virus propagation using a call graph to represent user connectivity and simulate topological spread.
• It introduces a hybrid virus model that combines topological spreading with random scanning to infect non-contacts.
• The researchers simulate virus spread under varying levels of susceptible device market share and MMS sending frequency.
• They apply network analysis techniques to assess the impact of control measures on infection rates and outbreak size.
• The model uses real call graph data to reflect realistic user interaction patterns and network fragmentation.
• Key metrics include infection rate, outbreak duration, and final number of infected devices under different control conditions.

Experimental results

Research questions

• RQ1 How does the inclusion of scanning behavior in MMS viruses affect their spreading efficiency compared to purely topological viruses?
• RQ2 To what extent can reducing the market share of vulnerable operating systems limit the spread of MMS-based mobile viruses?
• RQ3 How effective is limiting the frequency of MMS message transmission in curbing virus propagation?
• RQ4 What role does network topology and user connectivity fragmentation play in restricting virus spread?
• RQ5 Can combined control strategies significantly reduce the scale and speed of mobile virus outbreaks?

Key findings

• Hybrid MMS viruses that combine scanning and topological spreading are significantly more dangerous than purely topological viruses due to broader infection reach.
• Reducing the market share of susceptible handsets is an effective method to limit virus propagation, especially when the vulnerable OS falls below a critical threshold.
• Limiting the frequency of MMS message transmission by infected devices drastically reduces the number of secondary infections.
• Network fragmentation in the call graph naturally restricts topological spread, but this protection is overcome by scanning behavior.
• The combined effect of both control strategies—reducing vulnerable device prevalence and limiting MMS frequency—leads to a substantial reduction in outbreak size and duration.
• Simulation results show that even moderate reductions in MMS sending frequency can lead to exponential decreases in infection rates.