Volume 12, Issue 1 (3-2020)                   itrc 2020, 12(1): 20-31 | Back to browse issues page

XML Print


Download citation:
BibTeX | RIS | EndNote | Medlars | ProCite | Reference Manager | RefWorks
Send citation to:

Asgari S, Sadeghiyan B. Simulating Benchmark Datasets for Worm Propagation Studies. itrc 2020; 12 (1) :20-31
URL: http://journal.itrc.ac.ir/article-1-451-en.html
1- Department of Computer Engineering Amirkabir University of Technology
2- Department of Computer Engineering Amirkabir University of Technology Tehran, Iran
Abstract:   (2030 Views)
Identifying the roots of a worm and reconstructing its spread path are among essential concerns in digital forensics. This knowledge assist the prosecutor in understanding how the attack happened in the network and how security protections were breached. Evaluating methods proposed for this purpose is problematic due to the lack of suitable datasets containing both worm traffic and normal traffic. In this paper, we investigate various approaches of generating such datasets and propose a technique to generate suitable datasets for these evaluations.  ReaSE is a tool for creating realistic simulation environments, which considers three aspects, i.e., topology generation, normal traffic generation, and attack traffic generation. We modify ReaSE to make it suitable for generating these datasets. We also generate various datasets for Code Red I, Code Red II, SQL Slammer and modified version of them in different scenarios and make them accessible to the public. 
Full-Text [PDF 837 kb]   (799 Downloads)    
Type of Study: Research | Subject: Network

Add your comments about this article : Your username or Email:
CAPTCHA

Rights and permissions
Creative Commons License This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.