Fig. 4
From: Modeling self-propagating malware with epidemiological models
The cumulative number of the infected nodes I(t) (counting all nodes in states \(I, I_D\) and R) at each time point t of WannaCry propagation for different variants of WannaCry. Each WannaCry variant is identified by two parameters: the number of threads used for scanning and the time interval between scans (i.e., wc_1_500ms uses 1 thread to scan every 500 ms)