John Heidemann

Replay of Malicious Traffic in Network Testbeds

TitleReplay of Malicious Traffic in Network Testbeds
Publication TypeConference Paper
Year of Publication2013
AuthorsA. Hussain, Y. Pradkin, and J. Heidemann
Date Publishednov
Conference LocationWaltham, Massachusetts, USA

In this paper we present tools and methods to integrate attack measurements from the Internet with controlled experimentation on a network testbed. We show that this approach provides greater fidelity than synthetic models. We compare the statistical properties of real-world attacks with synthetically generated constant bit rate attacks on the testbed. Our results indicate that trace replay provides fine time-scale details that may be absent in constant bit rate attacks. Additionally, we demonstrate the effectiveness of our approach to study new and emerging attacks. We replay an Internet attack captured by the LANDER system on the DETERLab testbed within two hours.