T. Znati, James Amadei, Daniel R. Pazehoski, Scott Sweeny
{"title":"Design and analysis of an adaptive, global strategy for detecting and mitigating distributed DoS attacks in grid environments","authors":"T. Znati, James Amadei, Daniel R. Pazehoski, Scott Sweeny","doi":"10.1109/ANSS.2006.18","DOIUrl":"https://doi.org/10.1109/ANSS.2006.18","url":null,"abstract":"Basic protection schemes against denial-of-service (DoS) are based on a perimeter-based model, where attacks are dealt with after they occur. This is quite often too late to prevent damage or loss of resources and service. The focus of this paper is to investigate a distributed defense method that can neutralize the attack before it reaches the potential target in mass. In order to effectively implement this method, this paper proposes a progressive, globally deploy able sentinel scheme for data sampling, packet inspection, and DoS attack detection and recovery. A simulation framework is developed to study the performance of the proposed scheme. The results show a significant improvement in how the network deals with DoS attacks, in comparison to local DoS detection and prevention schemes.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125304625","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
A. Garg, V. Sankaranarayanan, S. Upadhyaya, K. Kwiat
{"title":"USim: a user behavior simulation framework for training and testing IDSes in GUI based systems","authors":"A. Garg, V. Sankaranarayanan, S. Upadhyaya, K. Kwiat","doi":"10.1109/ANSS.2006.45","DOIUrl":"https://doi.org/10.1109/ANSS.2006.45","url":null,"abstract":"Anomaly detection systems largely depend on user profile data to be able to detect deviations from normal activity. Most of this profile data is currently based on command-line instructions/directives executed by users on a system. With the advent and extensive usage of graphical user interfaces (GUIs), command-line data can no longer fully represent user's complete behavior which is essential for effectively detecting the anomalies in these GUI based systems. Collection of user behavior data is a slow and time consuming process. In this paper, we present a new approach to automate the generation of user data by parameterizing user behavior in terms of user intention (malicious/normal), user skill level, set of applications installed on a machine, mouse movement and keyboard activity. The user behavior parameters are used to generate templates, which can be further customized. The framework is called USim which can achieve rapid generation of user behavior data based on these templates for GUI based systems. The data thus generated can be utilized for rapidly training and testing intrusion detection systems (IDSes) and improving their detection precision.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131565719","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A framework for adaptive wavelet prediction in self-sizing networks","authors":"Srikant Nalatwad, M. Devetsikiotis","doi":"10.1109/ANSS.2006.4","DOIUrl":"https://doi.org/10.1109/ANSS.2006.4","url":null,"abstract":"In this paper, we propose a traffic predictor based on multiresolution decomposition for the adaptive bandwidth control in locally controlled self-sizing networks. A self-sizing network can provide quantitative packet-level QoS to aggregate traffic by allocating link/switch capacity automatically and adaptively using online traffic data. In a locally controlled network such as Internet, resource allocation decisions are made at the node level. We show that wavelet based adaptive bandwidth control method performs better than other popular methods like Gaussian predictor for such applications. We have compared the performance of different ortho-normal wavelets and found that Haar wavelet is best suited for traffic prediction. We have studied the effect of other wavelet parameters such as size of the window and number of filter coefficients. We also propose a novel adaptive wavelet predictor which can adapt very well to the changes of incoming bursty traffic.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"51 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121208521","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Grid-boxing for spatial simulation performance optimisation","authors":"K. Hawick, H. James, C. Scogings","doi":"10.1109/ANSS.2006.21","DOIUrl":"https://doi.org/10.1109/ANSS.2006.21","url":null,"abstract":"Computer simulations of complex systems such as physical aggregation processes or swarming and collective behaviour of life-forms, often require order N-squared computational complexity for N microscopic components. This is a significant handicap to simulating systems large enough to compare with real-world experimental data. We discuss space partitioning methods for two such simulation codes and demonstrate complexity improvements by taking advantage of information about locations and interaction distances of the microscopic model components. We present results for a diffusion limited cluster-cluster aggregation code and for an artificial life simulation code. We discuss the data structures necessary to support such algorithms and show how they can be implemented to obtain high performance and maximal simulation productivity for a given computational resource. There are some subtleties in whether such spatial partitioning algorithms should produce a computational complexity of N to some power between 1 and 2 or whether they should be order N log N. We discuss these effects in the context of our data.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"3 1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123664556","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
A. Alberti, Sebastião R. de Aguiar Filho, A. Garcia
{"title":"Modeling, simulation and performance evaluation for a CIOQ switch architecture","authors":"A. Alberti, Sebastião R. de Aguiar Filho, A. Garcia","doi":"10.1109/ANSS.2006.29","DOIUrl":"https://doi.org/10.1109/ANSS.2006.29","url":null,"abstract":"The intense growth experienced by the Internet on the past decade has motivated a considerable development in packet switching architectures. Several architectures have been proposed and implemented. Combined input-output queuing (CIOQ) is one of such successful architectures. In this paper, we present a proposal of modeling, simulation and performance evaluation for two CIOQ switch architectures developed by Santos and Motoyama. The main objective is to evaluate their performance and to compare main results. The performance evaluation covers blocking probability, mean and maximum queuing occupation for several switch dimensions and load intensities. Finally, we validated the proposal models and proved that Santos and Motoyama architectures are very efficient, with small blocking probabilities and queuing requirements.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121147436","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Performance evaluation of packet processing architectures using multiclass queuing networks","authors":"Sören Sonntag, M. Gries, C. Sauer","doi":"10.1109/ANSS.2006.35","DOIUrl":"https://doi.org/10.1109/ANSS.2006.35","url":null,"abstract":"Modern real-time systems consist of complex parallel and heterogeneous architectures. Early design decisions, such as the partitioning of functionality onto architecture building blocks and the choice of algorithms, have a large impact on the quality of the resulting platform. In order to support the designer during this concept phase, we have developed our performance evaluation framework SystemQ. In this paper, we demonstrate why multiclass queuing networks as used by SystemQ are a natural abstraction for evaluating network processing platforms. In particular, we reveal the impact of scheduling policies on the quality-of-service, such as the residence time of network traffic in the system. For the same stimuli, the packet latency can vary by more than one order of magnitude if only one queuing discipline in the system is modified.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126283964","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Luk Van Ertvelde, Filip Hellebaut, L. Eeckhout, K. D. Bosschere
{"title":"NSL-BLRL: efficient cache warmup for sampled processor simulation","authors":"Luk Van Ertvelde, Filip Hellebaut, L. Eeckhout, K. D. Bosschere","doi":"10.1109/ANSS.2006.33","DOIUrl":"https://doi.org/10.1109/ANSS.2006.33","url":null,"abstract":"Architectural simulation is extremely time-consuming given the huge number of instructions that need to be simulated for contemporary benchmarks. Sampled simulation which selects a number of samples from the complete benchmark execution yields substantial speedups. However, there is one major issue that needs to be dealt with in order to minimize non-sampling bias, namely the hardware state at the beginning of each sample. This is well known in the literature as the cold-start problem. The hardware structures that suffer the most from the cold-start problem are cache hierarchies. In this paper, we propose NSL-BLRL which combines two previously proposed cache hierarchy warmup approaches, namely no-state-loss (NSL) and boundary line reuse latency (BLRL). The idea of NSL-BLRL is to warmup the cache hierarchy using a hardware state checkpoint that stores a truncated NSL stream. The NSL stream is a least-recently used stream of (unique) memory references in the pre-sample. This NSL stream is then truncated to form the NSL-BLRL warmup checkpoint; this is done by inspecting the sample for determining how far in the pre-sample one needs to go back to accurately warmup the hardware state for the given sample. We show using SPEC CPU2000 benchmarks that NSL-BLRL is (i) nearly as accurate as BLRL and NSL for sampled processor simulation, (ii) yields simulation time speedups of several orders of magnitude compared to BLRL, and (iii) is more space-efficient than NSL. As such, we conclude that NSL-BLRL is a highly efficient and accurate cache warmup strategy for sampled processor simulation.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127251640","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Simulation and analysis of complex biological processes: an organisation modelling perspective","authors":"T. Bosse, C. Jonker, Jan Treur","doi":"10.1109/ANSS.2006.41","DOIUrl":"https://doi.org/10.1109/ANSS.2006.41","url":null,"abstract":"This paper explores how the dynamics of complex biological processes can be modelled and simulated as an organisation of multiple agents. This modelling perspective identifies organisational structure occurring in complex decentralised processes and handles complexity of the analysis of the dynamics by structuring these dynamics according to an organisational structure. More specifically, dynamic properties at different levels of aggregation in the organisational structure are identified, and related to each other according to the organisational structure. The applicability of this organisational modelling approach to address complexity in biological context is illustrated by a case study: the organisation of intracellular processes.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120991817","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A simulation and decision framework for selection of numerical solvers in scientific computing","authors":"Peter Bunus","doi":"10.1109/ANSS.2006.9","DOIUrl":"https://doi.org/10.1109/ANSS.2006.9","url":null,"abstract":"Selecting the right numerical solver or the most appropriate numerical package for a particular simulation problem it is increasingly difficult for users without an extensive mathematical background and deeper knowledge in numerical analysis. In this paper, we propose a model-driven combined decision-simulation framework for automatically selecting a numerical method for a given set of equation system. We also propose a formal paradigm based on domain-specific languages for specification of structural and behavioral aspects of the numerical equation solving process. Starting from a declarative description of the equation system that need to be solved, our system is able to detect the nature of the equations, perform symbolic manipulations of the equations, and transform them into a domain-specific model. We describe the motivation for such a system, its main features, and a prototype environment together with a usage example.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129371942","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
M. Barcellos, Giovani Facchini, Hisham H. Muhammad
{"title":"Bridging the gap between simulation and experimental evaluation in computer networks","authors":"M. Barcellos, Giovani Facchini, Hisham H. Muhammad","doi":"10.1109/ANSS.2006.15","DOIUrl":"https://doi.org/10.1109/ANSS.2006.15","url":null,"abstract":"Simulation and experimentation are two complementary techniques for performance evaluation, each one of them having opposite characteristics and advantages. While one allows total control and abstraction in the experiment, the other provides greater detail and realism. Though ideally it would be desirable to perform both, it is hard to direct the required efforts to develop a performance evaluation twice, once over a simulator and then again on a real network. In this paper, a new approach is explored through a tool called Simmcast testbed, which allows one to execute, from a single codebase, experiments both in simulation and experimentation mode. A didactic example is discussed in detail, and the correlation of the simulated and experimental results is presented.","PeriodicalId":308739,"journal":{"name":"39th Annual Simulation Symposium (ANSS'06)","volume":"99 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-04-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129093870","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}