Plug & execute framework for network traffic generation

Authors:
Uta Ziegler;Youssif B. Al-Nashif;Salim Hariri
Affiliations:
Western Kentucky University, Bowling Green, KY;University of Arizona, Tucson, AZ;University of Arizona, Tucson, AZ
Venue:
Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research
Year:
2010

Citing 11
Cited 0

On the self-similar nature of Ethernet traffic (extended version)

IEEE/ACM Transactions on Networking (TON)
Difficulties in simulating the internet

IEEE/ACM Transactions on Networking (TON)
Intrusion Detection Testing and Benchmarking Methodologies

IEEE-IWIA '03 Proceedings of the First IEEE International Workshop on Information Assurance (IWIA'03)
An Experience Developing an IDS Stimulator for the Black-Box Testing of Network Intrusion Detection Systems

ACSAC '03 Proceedings of the 19th Annual Computer Security Applications Conference
The Autonomic Computing Paradigm

Cluster Computing
Realistic internet traffic simulation through mixture modeling and a case study

WSC '05 Proceedings of the 37th conference on Winter simulation
Automatic Evaluation of Intrusion Detection Systems

ACSAC '06 Proceedings of the 22nd Annual Computer Security Applications Conference
Network Traffic Emulation for IDS Evaluation

NPC '07 Proceedings of the 2007 IFIP International Conference on Network and Parallel Computing Workshops
Self-Configuration of Network Security

EDOC '07 Proceedings of the 11th IEEE International Enterprise Distributed Object Computing Conference
Privacy/Analysis Tradeoffs in Sharing Anonymized Packet Traces: Single-Field Case

ARES '08 Proceedings of the 2008 Third International Conference on Availability, Reliability and Security
A case study in testing a network security algorithm

Proceedings of the 4th International Conference on Testbeds and research infrastructures for the development of networks & communities

Quantified Score

Hi-index	0.00

Visualization

Abstract

Evaluating IDS algorithms and systems is often an ad-hoc process and makes it hard to compare evaluation results and performance of IDS systems. There is a need for divers and realistic test traffic and for developing metrics to be able to judge whether some generated traffic is a representative sample of observed traffic. In this paper, the authors propose a framework for a network traffic generator which creates diverse traffic through a variety of traffic sources and describe a working implementation of it. The lessons learned from this experience can serve as the basis to create a detailed specification for an open-source implementation of the framework.