Design And Implementation Of The Ten Million Level Network Security Event And Information Security Event Simulation System

With the rapid development, the internet scale is becoming larger and larger and the relationship is much more complex than before. Security problems happen around the enormous internet space every time. In order to analyze the security problem, various simulation systems are established all around the world. However,most of them are relatively small and the largest one reaches only 100,000. These systems can not reflect the large-scale internet security events very well. Therefore,it is needed to design and implement a ten million level network simulation system.In this paper, a tens of millions of network and information security simulation system is designed and implemented. It is based on the NS-3 discrete event simulator combined with the abstraction techniques and parallel technology. This system can simulate a ten million level topology and social network, divide parallel tasks, abstract and reduce of the hosts, establish the simulation platform, and simulate the security events. Its ability of simulating various network and information security events provides data support for the analysis of related events,situation prediction, impact assessment, etc.Firstly, we introduced the NS-3 simulator from characteristics of NS-3, basic concepts and operation process, the parallel simulation technology from parallel synchronization mechanism and task division method, the abstract simulation technology, topology creating technology and security events.Secondly, we designed and implemented a ten million network and information security simulation system. This system consists of the parameter configuration,topology creation, simulation and auxiliary modules. The parameter configuration module is implemented using tornado, used for topology, application and parallel parameters input. The topology creation module is used for ten million level simulating topology and social network creation, which outputs the topological file.The simulation subsystem is used for the construction of tens of million network,simulating the security events, collecting and processing the simulation results. The auxiliary subsystem is used for the construction of physical environment and monitoring of key points.Finally, we tested the system in term of function and efficiency. The results show that the system can achieve tens million node network and user security event simulation.In summary, we designed and implemented a tens million network and information security event simulation system. It can construct the topology and simulate large-scale security events, such as tens million nodes worm diffusion events, tens million Wei Xin information dissemination events.