Application-Level & Agent Based Simulation for Network Security using NeSSi2

NeSSi (Network Security Simulator) is a novel network simulation tool which incorporates a variety of features relevant to network security distinguishing it from general-purpose network simulators. We present NeSSi2, the Network Security Simulator, a simulation environment that is based on the service-centric agent platform JIAC. It focuses on network security-related scenarios such as attack analysis and evaluation of counter-measures. We introduce the main NeSSi2 concepts and discuss the motivation for realizing them with agent technology. Then, we present the individual components and examples where NeSSi2 has been successfully applied. Network or security functionality, but although they provide detailed results, experiments are time consuming and remain complex to setup and maintain. Another approach is to represent the system with the aid of mathematical models and find analytical answers, i.e. logical and quantitative relationships between the entities. Typically, such models also become very complex, in particular for a concurrent system such as IDS. Therefore, simulations are useful for the evaluation of distributed systems and protocols. Depending on the evaluation metrics, the simulations allow the abstraction from irrelevant properties. In addition, hazard scenarios, called "what-if scenarios", can be constructed which may not be possible in real-world test environments.