Web Based Distributed SES/NZER Using Service Oriented Architecture

As the network uses, and especially the number of internet users, increases rapidly, an efficient system for managing large network traffic datasets becomes an important issue. There are several network traffic analysis tools such as tcpdump, Ethereal, and other applications. But, these tools have weaknesses: limited size of files, command line execution, large memory and huge computational power requirement, and complications. In addition to these scalability limitations, both tcpdump and Ethereal have a security issue. Files captured by these tools keep all the packet information such as IP addresses, port numbers, and packet sizes. As well as basic network traffic information, captured files contain secure information: user identification numbers (IDs) and passwords. Therefore, captured files should not allow to be leaked out. However, network analyses need to be performed outside target networks in some cases. The main objective of this study is to propose an approach to deal with a large amount of network behaviors being quickly and efficiently analyzed. The System Entity Structure (SES) facilitates implementing a system to achieve this goal. To speed up evaluation time, we apply a web-based distributed simulation methodology. A web-based distributed simulation contains two fundamental processes: distributing and analyzing among loosely coupled models through message-passing methods. DEVS/SOA (DEVS/Service Oriented Architecture) facilitates deploying workloads into multiservers and consequently increasing overall system performance. The distributed simulation— allocating distributing models inside networks and assigning analyzing models outside networks— also allows analysis of network behaviors out of networks while keeping important information secured.