Research On Extension And Optimization Of PDNS For Network Security Events

With the rapid development of network, the development of human technology is in the direction of global information. At the same time, the frequent occurrence of various network security events is threatening the network security. Among the researches on network technology and methods to response network security events, network simulation has become one of the irreplaceable and important means with its unique advantage. Up to present, many domestic and foreign research institutions and commercial organizations have developed a variety of network simulators. Among them, PDNS is a widely-used parallel network simulator recently. However, as original PDNS can't provide direct simulation support on new network security events, we need to expand and optimize PDNS. When simulation support on new network security events is provided, we can define network topology according to simulation needs, set the network parameters, simulate behaviors of network security event, observe parameters of various performance indicators, and finally do further analysis on network security events.Therefore it is quite important to expand and optimize original PDNS, and it is the basis of simulation, validation and analysis for network security events. This paper focuses on the extension and optimization of PDNS for network security events. The main content are shown as below.In this paper, simulation mechanism of parallel network simulator PDNS has been researched and analyzed from the viewpoints of simulation principle, split object model, extension of PDNS and method of simulation. Based on research and analysis of the traditional method of simulating network security events with PDNS, it has been found that there are still some deficiencies on PDNS which are needed to optimize.For the deficiencies of PDNS on simulating network security events, the new method of extension based on framework model was proposed which is a supportive method of simulation to make the operation of simulation much easier. And the method of simulation based on interface configuration was proposed on which users can choose and input parameters of network security events instead of writing a Tcl script.The extension and optimization system of PDNS for network security, including network security events adding sub-system and configuring sub-system has been designed and implemented to make the simulation with PDNS much easier.Finally, the extension and optimization system of PDNS for network security events has been tested with classic network security events such as DDoS attack, network worm and Botnet, and the results of tests show that system is effective.