The Research And Implementation Of The SSFNet-Based Large-Scale Worm Propagation Simulation And Demonstration System

With the development of Internet, the threat of network worms to computer security and network security is increasing. Network worms can scan and attack hosts with defects and spread from one autonomous system to another. They happen frequently, usually hide for a long time within large area and can cause huge loss. Under this background, the research on worm propagation models become hot these years and lots of mathmatical models appear such as SEM, SIR, Two-Factor, etc.The current research on model and simulation of worm propagation are mostly focused on mathematical research and matlab simulation. To simulate worm propagation under real Internet autonomous systems environment and to provide universal worm propagation model simulation and demonstration frameworks, we design a system based on real Internet autonomous systems to support various worm propagation models. The system is composed of simulation sub-system, demonstration sub-system and IP geography information sub-system. This paper demonstrates the system in six parts. The first chapter describes the research background, innovation, etc. The second chapter describes the concepts, principles and usage of SSFNet network simulation tool, RouteViews project and WHOIS databases. The third chapter describes the design philosophy and preliminary design of the system. The fourth chapter describes the detailed design including the design and implementation of system modules. The fifth chapter introduces the code of SIR worm propagation model, embeds it into the simulation and demonstration system and gives test result and analysis. The sixth chapter summarizes the work done at present and gives an outlook into the future.