• DocumentCode
    534290
  • Title

    Hybrid Network Worm Emulation and Analysis

  • Author

    Xiaohui, Kuang ; MinHuan, Huang ; Yan, Wen ; Fei, Xu

  • Author_Institution
    Nat. Key Lab. of Sci. & Technol. on Inf. Syst. Security, Beijing Inst. of Syst. Eng., Beijing, China
  • Volume
    1
  • fYear
    2010
  • fDate
    16-18 July 2010
  • Firstpage
    62
  • Lastpage
    66
  • Abstract
    The worm experimental environment is the pivotal foundation for the worm research. Existing methods to build the environment can be classified into three categories: mathematical modeling, simulation and emulation. However, almost all of the existing methods inherently face a rigid fidelity-scalability tradeoff problem. Aming at this issue, this paper proposes a novel virtual-reality hybrid worm emulation model, which integrated the packet-level simulation and network emulation method to build worm experimental environment, for analyzing the behavior of worm propagation with respect to the changes of the network and worm characteristics. With the experiments, we analyze the impacts, induced by the network and worm characteristics on the worm propagation. The results indicate that our experimental environment can provide great support for the worm research.
  • Keywords
    computer network security; virtual reality; hybrid network worm emulation; mathematical modeling; network emulation method; packet level simulation; pivotal foundation; rigid fidelity scalability tradeoff problem; virtual reality hybrid worm emulation model; worm experimental environment; worm propagation; Analytical models; Bandwidth; Computational modeling; Emulation; Grippers; Mathematical model; Scalability; Emulation; Fidelity-preserving; Hybrid Experimental Environment; Network worm;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Information Technology and Applications (IFITA), 2010 International Forum on
  • Conference_Location
    Kunming
  • Print_ISBN
    978-1-4244-7621-3
  • Electronic_ISBN
    978-1-4244-7622-0
  • Type

    conf

  • DOI
    10.1109/IFITA.2010.26
  • Filename
    5635196