Our contributions to the SSFNet models are twofold: through contributed model packages to the Java implementation, including models of Distributed Denial of Service (DDoS) attacks and large-scale worm attacks, and secondly through porting the SSFNet framework onto the ISSF C++ kernel, thus gaining more performance in parallel and distributed execution.

The DDoS package, named SSF.App.DDoS , has since its inception been a part of the standard SSFNet distribution. It provides facilities to set up a SYN flood based DDoS attack scenario in an SSFNet simulation. The package also includes some preliminary models of trace back schemes based on Netflow data analysis for tracing back spoofed attack sources to their origins.

The worm attack package, named SSF.App.Worm , uses multi-resolution modeling techniques to model large-scale Internet worm attacks both in terms of large-scale dynamics and in local detailed infrastructure effects. It has been used to study worm impact on the inter-domain routing infrastructure and to study the effectiveness of proposed worm defenses. In cooperation with collaborators at the Institute for Security Technology studies it has also been used to generate realistic test traffic for a working worm detection system prototype. This package is a part of the standard SSFNet distribution as of release 1.5.0. html"> web page .

overview | people | projects | software | papers | connections | positions | contact | etc