S3F: the Scalable Simulation Framework revisited
Proceedings of the Winter Simulation Conference
| Hi-index | 0.00 |
Typical worm simulators analyze and model specifi c worm to simulate the worm's propagation effect. But those simulators are hard to simulate the variants of th e worm and other worms that have different features. I n this paper, we attempt to construct a worm taxonomy based on five steps; target discovery, vulnerability exp loit, code transfer, activation and payload execution. E ach step is composed of several actions called actors. Actor can be explained as a unit function module of a worm. By dividing a worm's propagation cycle into five ste ps, a worm can be expressed with several actors which belong to each step. To simulate a worm with SSFNet, simulation model must be expressed with DML code. D ML is used to describe the network model for SSFNet. In this paper, we describe blaster worm and sasser worm with our proposed actors using DML code.