CRI: CRD: iSim - Simulator of Internet-Scale Events

蠕虫传播、分布式拒绝服务攻击、闪存拥挤、路由不稳定和DNS攻击等互联网规模事件的动态取决于生成或转发合法和恶意流量的所有网络的配置。为了充分理解这些事件，研究人员需要仿真工具来再现所有相关的事件细节和事件流量？S与互联网的交互架构。还提出了针对互联网规模攻击的协作防御措施。这些防御的有效性取决于底层的互联网拓扑和部署位置，因此需要高保真的互联网模拟来正确评估这些防御，目前的网络模拟器不能用于研究互联网规模的事件。它们是通用的数据包级模拟器，复制了过多的网络通信细节，从而限制了可伸缩性。即使是专为大型活动设计的分布式版本的网络模拟器，如GTNetS和PDNS，其可伸缩性也有限，因为每个分组及其处理都被详细模拟。例如，PDNS需要功能强大的100+CPU群集，以模拟多达1.28万台易受攻击的主机的蠕虫传播。许多研究人员无法接触到如此大的星系团。当前网络模拟器的另一个缺点是缺乏内置的Internet模型。旨在模拟互联网规模事件的研究人员必须自己组装互联网拓扑结构，并确定终端-主机通信模式、链路带宽和路由。从零开始建立一个现实的互联网模型所需的工作量是相当大的，因此许多研究人员采用了简化的模型(例如，假设无限带宽链路，假设高度对称的互联网拓扑结构等)。这会导致错误的结果。ISIM的工作建立在我们最近在创建互联网规模的蠕虫传播事件模拟器PAWS方面取得的成就的基础上。PAWS是一个分布式模拟器，部署在Emulab试验台上。该项目将探索PAWS模拟器作为社区资源的潜力。

Dynamics of Internet-scale events such as worm propagation, distributed denial-of-service attacks, flash crowds, routing instabilities, and DNS attacks depend on the configuration of all the networks that generate or forward legitimate and malicious traffic. To fully understand these events researchers need simulation tools that reproduce all the relevant event details and event traffic?s interaction with the Internet architecture. Collaborative defenses against Internet-scale attacks have also been proposed. The effectiveness of these defenses depends on the underlying Internet topology and the deployment locations, so high-fidelity Internet simulation is necessary to properly evaluate these defenses.Current network simulators cannot be used to study Internet-scale events. They are general-purpose, packet-level simulators that reproduce too many details of network communication, which limits scalability. Even distributed versions of network simulators such as GTNetS and PDNS, designed for large-scale events, have limited scalability because each packet and its handling are simulated in minute detail. For example, PDNS requires powerful, 100+ CPU clusters, to simulate worm propagation with up to 1.28 M vulnerable hosts. Many researchers do not have an access to such a large cluster. Another drawback of the current network simulators is that they lack a built-in Internet model. Researchers that aim to simulate Internet-scale events must themselves assemble the Internet topology, and determine end-host communication patterns, link bandwidths and routes. The effort required to set up a realistic Internet model from scratch is considerable so many researchers adopt simplfied models (e.g., assuming infinite bandwidth links, assuming highly symmetric Internet topology etc.) which leads to incorrect results. The iSim work builds upon our recent achievements in creating an Internet-scale simulator of worm propagation events, called PAWS. PAWS is a distributed simulator, deployed on the Emulab testbed. This project will explore the potential of the PAWS simulator as a community resource.