Cybersim: geographic, temporal, and organizational dynamics of malware propagation

Authors:
Nandakishore Santhi;Guanhua Yan;Stephan Eidenbenz
Affiliations:
Los Alamos National Laboratory, Los Alamos, NM;Los Alamos National Laboratory, Los Alamos, NM;Los Alamos National Laboratory, Los Alamos, NM
Venue:
Proceedings of the Winter Simulation Conference
Year:
2010

Citing 5
Cited 0

Internet research needs better models

ACM SIGCOMM Computer Communication Review
Multi-scale integrated information and telecommunications system (MIITS): first results from a large-scale end-to-end network simulator

Proceedings of the 38th conference on Winter simulation
ActivitySim: large-scale agent-based activity generation for infrastructure simulation

SpringSim '09 Proceedings of the 2009 Spring Simulation Multiconference
Criticality analysis of Internet infrastructure

Computer Networks: The International Journal of Computer and Telecommunications Networking
Explicit Spatial Scattering for Load Balancing in Conservatively Synchronized Parallel Discrete Event Simulations

PADS '10 Proceedings of the 2010 IEEE Workshop on Principles of Advanced and Distributed Simulation

Quantified Score

Hi-index	0.00

Visualization

Abstract

Cyber-infractions into a nation's strategic security envelope pose a constant and daunting challenge. We present the modular CyberSim tool which has been developed in response to the need to realistically simulate at a national level, software vulnerabilities and resulting malware propagation in online social networks. CyberSim suite (a) can generate realistic scale-free networks from a database of geo-coordinated computers to closely model social networks arising from personal and business email contacts and online communities; (b) maintains for each host a list of installed software, along with the latest published vulnerabilities; (c) allows to designate initial nodes where malware gets introduced; (d) simulates using distributed discrete event-driven technology, the spread of malware exploiting a specific vulnerability, with packet delay and user online behavior models; (e) provides a graphical visualization of spread of infection, its severity, businesses affected etc to the analyst. We present sample simulations on a national level network with millions of computers.