Detecting sources of computer viruses in networks: theory and experiment