Simulation framework for cyber terrors and defense

It is almost impossible to see how worm viruses like CodeRed or Bagle influence real networks and how effectively the defense techniques work. In the cases, simulation is a reasonable and useful alternative. In this paper, we propose a network and security simulation framework built on SSFNet and SSF. The proposed framework allows to model very large networks in an easy way and to run Java applets that mimic real cyber terrors. The framework also allows simulating security policies of firewalls and intrusion detection systems. In order to check the usability and the feasibility of the proposed framework, we per-form a simulation with Java applets, called actors, that mimic worm viruses and are spread on a modeled network with 1,750 computers. We analyze and compare the behaviors of worms on the network with or without firewalls.