EA-CPNsim: A CPN-Based Simulation Platform for Analysis and Defense Design of Internet End-Systems Targeted Attacks

A real-time discrete event simulation platform for Internet end-system targeted attacks, EA-CPNsim, is presented in this paper. This platform provides support for modeling the targeted end-systems behavior and the attack effect, helping the system administrator chooses and verifies the defense schemes, and evaluating the system consequences. EA-CPNsim is constructed based on the CPN tools, a widespread tool for simulating and analyzing CP-nets. CPN pattern database and control algorithm database are extended to be used for the simulation of attacker and victim system's running behavior. Different from other Internet attack simulation platforms, EACPNsim realizes that: (i) hierarchical and modular modeling for simplifying the abstraction of simulation target.(ii) adopting distributed style on simulator deployment to balance the overload between object simulation and numerical decision, so as to improving the ability of simulation.(iii) Auto CPnets generation based on the template library constructed first for simplifying user operation. A simple example of a attack defense analysis is used to illustrate the validity of our platform at last.