The Research And Implementation Of Network Attack Behavior Simulation

With the ever-increasing reliance on network information systems for commerce, industry, public infrastructures and military, various network attack can result in devastating effects. There is a significant need to understand not merely that a system can be attacked,but to what extent and under what conditions. Simulation is an effective method for analysis of network attack behavior, which allows we to easily obtain the influence of network attack and test security measure of network under varying conditions (e.g., network topology, background traffic, terminal configure). Many of these conditions are costly or impossible to duplicate in actual network.Firstly, this paper investigates the principle of network simulation according to technology of Discrete Event System simulition. With OPNET network simulation platform, we have summerized three kinds of methods of simulating network attack behavior and compared their merits and defects, analyzed the limitation of network simulation technique at simulating network attack behavior, drawn a conclusion that what kinds of network attack can be simulated. Secondly, we have analyzed the pivotal process module of OPNET and modeled SYN flood attack, results validation has been performed by comparing model output with real data. Finally, We have executed the attack model against a special target network model, got the quantification relationships between SYN flood attack effectiveness and TCP parameters, achieved expected objective of simulation.