Dynamic Simulation on Network Security Simulator Using SSFNET

Recently, a network defense simulator becomes essential in studying cyber incidents as the cyber terror becomes more and more interesting. The network defense simulator is a tool to estimate damages and effectiveness of a defense mechanism by modeling network intrusions and defense mechanisms. Using this tool, users can find efficient ways of preventing cyber terror and recovering from the damage. Previous simulators start the simulation after entire scenario has prepared and been loaded onto simulation engine. However, in this way it is not suitable to model human judgement and behavior, therefore it is impossible to simulate the real cyber terror very well. In this paper, we have added a dynamic simulation component to our previous network defense simulator. This component improves accuracy of modeling of network intrusions and defense behaviors. We have also proposed modified architecture of the simulator system. Finally we have verified correctness of simulation results by simulating slammer worm.