Tools for worm experimentation on the DETER testbed

International Journal of Communication Networks and Distributed Systems

Volumn 5, Issue 1-2, 2010, Pages 151-171

  Wei, Songjie ^a   Hussain, Alefiya ^b   Mirkovic, Jelena ^c   Ko, Calvin ^b  

^a UNIVERSITY OF DELAWARE   (United States)

^b Cobham Inc ^*  (United States)

^c UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

Author keywords

Communication network; Distributed system; Emulator; Experimentation; Simulation; Testbed; Worm

Indexed keywords

COMMUNICATION SYSTEMS; TELECOMMUNICATION NETWORKS;

DISTRIBUTED SYSTEMS; EMULATOR; EXPERIMENTATION; SIMULATION; WORM;

TESTBEDS;

EID: 80053264684     PISSN: 17543916     EISSN: 17543924     Source Type: Journal    
DOI: 10.1504/IJCNDS.2010.033972     Document Type: Article

References (31)

1. Benzel, T., Braden, R., Kim, D., Neuman, C., Joseph, A., Sklower, K., Ostrenga, R. and Schwab, S. (2006) 'Experience with DETER: a testbed for security research', Proceedings of Tridentcom.
2. Fujimoto, R., Perumalla, K., Park, A., Wu, H., Ammar, M. and Riley, G. (2003) 'Large-scale network simulation - how big? How fast?', Proceedings of the IEEE/ACM MASCOTS.
3. G.I. of Technology, The Georgia Tech Network Simulator, available at http://www.ece.gatech.edu/research/labs/MANIACS/GTNetS/.
4. Hu, N., Li, L.E., Mao, Z.M., Steenkiste, P. and Wang, J. (2004) 'Locating internet bottlenecks: algorithms, measurements, and implications', Proceedings of ACM SIGCOMM.
5. Inguma Testing and Penetration Framework, available at http://inguma.sorceforge.net.
6. Liljenstam, M., Nicol, D.M., Berk, V.H. and Gray, R.S. (2003) 'Simulating realistic network worm traffic for worm warning system design and testing', Proceedings of the 2003 ACM Workshop on Rapid Malcode (WORM), pp. 24-33.
7. Liljenstam, M., Yuan, Y., Premore, B. and Nicol, D. (2002) 'A mixed abstraction level simulation model of large-scale internet worm infestations', Proceedings of the 10th IEEE MASCOTS, p. 109.
8. Moore, D., Paxson, V., Savage, S., Shannon, C., Staniford, S. and Weaver, N. (2003a) 'Inside the Slammer worm', IEEE Security and Privacy, Vol. 1, No. 4, pp. 33-39.
9. Moore, D., Shannon, C., Voelker, G. and Savage, S. (2003b) 'Internet quarantine: requirement for containing self-propagating code', Proceedings of the IEEE INFOCOM Conference.
10. Moore, D., Shannon, C., Voelker, G.M. and Savage, S. (2003c) 'Internet quarantine: requirements for containing self-propagating code', Proceedings of IEEE INFOCOM, Vol. 3, pp. 1901-1910.
11. Parallel/Distributed NS, available at http://www.cc.gatech.edu/computing/ compass/pdns/index.html.
12. Perumalla, K.S. and Sundaragopalan, S. (2004) 'High-fidelity modeling of computer network worms', Proceedings of the 20th ACSAC, pp. 126-135.
13. Riley, G.F., Sharif, M.I. and Lee, W. (2004) 'Simulating internet worms', Proceedings of the IEEE MASCOTS, pp. 268-274.
14. Scalable Simulation Framework, available at http://www.ssfnet.org/ homePage.html.
15. Schwab, S., Wilson, B., Ko, C. and Hussain, A. (2007) 'SEER: a security experimentation environment for DETER', Proceedings of the DETER Community Workshop on Cyber Security Experimentation and Test.
16. SecurityForest: ExploitTree, available at http://www.securityforest.com.
17. Shannon, C. and Moore, D. (2004) 'The spread of the witty worm', IEEE Security and Privacy, Vol. 2, No. 4, pp. 46-50.
18. Singh, S., Estan, C., Varghese, G. and Savage, S. (2004) 'Automated worm fingerprinting', Proceedings of the OSDI.
19. Sommers, J., Yegneswaran, V. and Barford, P. (2004) 'A framework for malicious workload generation', Proceedings of the ACM SIGCOMM/USENIX Internet Measurement Conference.
20. Staniford, S., Paxson, V. and Weaver, N. (2002) 'How to own the internet in your spare time', Proceedings of the 11th USENIX Security Symposium.
21. The Attack ToolKit, available at http://www.computec.ch/projekte/atk.
22. The Metasploit Project, available at http://www.metasploit.com/.
23. The Network Simulator - ns-2, available at http://www.isi.edu/nsnam/ns/.
24. U. of Oregon, 'Route Views project', available at http://www.routeviews. org/.
25. Vigna, G., Robertson, W. and Balzarotti, D. (2004) 'Testing network-based intrusion detection signatures using mutant exploits', Proceedings of the ACM Conference on Computer and Communication Security.
26. Vishwanath, K. and Vahdat, A. (2009) 'Realistic and responsive network traffic generation', IEEE/ACM Transactions on Networking.
27. Wagner, A., Dubendorfer, T., Plattner, B. and Hiestand, R. (2003) 'Experiences with worm propagation simulations', Proceedings of the 2003 ACM Workshop on Rapid Malcode (WORM), pp. 34-41.
28. Weaver, N., Hamadeh, I., Kesidis, G. and Paxson, V. (2004) 'Preliminary results using scale down to explore worm dynamics', Proceedings of ACM CCS Workshop on Rapid Malcode (WORM'04).
29. Wei, S. and Mirkovic, J. (2006) 'A realistic simulation of internet-scale events', Proceedings of the VALUETOOLS.
30. White, B., Lepreau, J., Stoller, L., Ricci, R., Guruprasad, S., Newbold, M., Hibler, M., Barb, C. and Joglekar, A. (2002) 'An integrated experimental environment for distributed systems and networks', Proc. of the OSDI, USENIX Association, Boston, MA, pp. 255-270.
31. Zou, C.C., Gong, W. and Towsley, D. (2003) 'Worm propagation modeling and analysis under dynamic quarantine defense', Proceedings of ACM CCS Workshop on Rapid Malcode (WORM'03).