Simulation Model Design of a Security System Based on a Policy-Based Framework

Abstract

The management of network infrastructure is difficult and complex with the growth of the Internet. In an era of increasing technical complexity, it is becoming difficult to find trained personnel who can manage the new features introduced into the various servers, routers, and security systems. This article describes the modeling and simulation of a security system based on a policy-based framework that has some merits. Each component is implemented in a hybrid design using modeling concepts from discrete event system specification (DEVS) formalism and problem-solving concepts from the blackboard architecture of artificial intelligence. The authors propose that the intrusion detection system detects intrusions by using the blackboard and reports this information to the policy-based framework for automatic management. The policy server informs the firewall about this situation to prevent damage to the network.

Get full access to this article

View all access options for this article.

References

[1] Malik, S. 2003. Network security principles and practices. San Jose, CA: Cisco .

[2] Verma, D. C. 2002. Simplifying network administration using policy-based management . Network, IEEE 16: 20-26 .

[3] Seo, H. S., and T. H. Cho. 2001. Simulation of network security with collaboration among IDS models. In Lecture notes on artificial intelligence, LNAI 2256, 438-448. New York: Springer Verlag .

[4] Bace, R. 2000. Intrusion detection. New York: Macmillan .

[5] Zwicky, E. D., S. Cooper, and D. B. Chapman. 2000. Building Internet firewalls. 2d ed. O’Reilly & Associates .

[6] Haixin, D., W. Jianping, and L. Xing. 2000. Policy based access control framework for large networks . In Proceedings of the IEEE International Conference on ICON 2000, September.

[7] Mclure, S., J. Scambray, and G. Kurtz. 1999. Hacking exposed: Network security secrets and solutions. New York: McGraw-Hill .

[8] Seo, H. S., and T. H. Cho. 2003. An application of black board architecture for the coordination among the security systems . Simulation Modelling Practice and Theory 11 (3-4): 269-284 .

[9] Zeigler, B. P., H. Praehofer, and T. G. Kim. 2000. Theory of modeling and simulation: Integrating discrete event and continuous complex dynamic systems. San Diego: Academic Press .

10.

[10] Cho, T. H., and B. P. Zeigler. 1997. Simulation of intelligent hierarchical flexible manufacturing: Batch job routing in operation overlapping . IEEE Transactions on Systems, Man, and Cybernetics A 27: 116-126 .

11.

[11] Ram, S., and V. Ramesh. 1995. A blackboard-based cooperative system for schema integration . Expert, IEEE 10: 56-62 .

12.

[12] Seo, H. S., T. H. Cho, and S. D. Chi. 2003. Modeling and simulation of distributed security models. In Lecture notes on computer science, LNCS 2660, 809-818. New York: Springer Verlag .

13.

[13] Biship, M. 2003. Computer security. Reading, MA: Addison-Wesley .

14.

[14] Barrus, J., and N. C. Rowe. 1998. A distributed autonomous-agent network-intrusion detection and response system . In Proceedings of the Command and Control Research and Technology Symposium, June, Monterey, CA, pp. 577-586 .

15.

[15] Seo, H. S., and T. H. Cho. 2002. Modeling and simulation for detecting a distributed denial of service attack. In Lecture notes on artificial intelligence, LNAI 2557, 179-190. New York: Springer Verlag .

16.

[16] Proctor, P. E. 2001. Practical intrusion detection handbook. Engle-wood Cliffs, NJ: Prentice Hall .