A Comprehensive Simulation Platform for Intrusion Detection in Distributed Systems

This paper 1 describes the simulation of an attack recognition system in a distributed environment. The underlying technique of attack recognition is based on assertion checking. An auxiliary process called watchdog queries the users for a scope-le, from which an as-sertable plan called Sprint plan is generated. The sprint plan consists of carefully derived assertions, which forms the basis for attack monitoring. Two environments are simulated for the purpose of testing and evaluation of the intrusion detection system. First, a general academic environment with limited security restrictions is simulated. Second, a virtual banking environment with stringent security requirements is simulated. Diierent attack scenarios are simulated for the purpose of testing the recognition system.