By Topic

LLSIM: network simulation for correlation and response testing

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$31 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

4 Author(s)
Haines, J.W. ; Lincoln Lab., MIT, Lexington, MA, USA ; Goulet, S.T. ; Durst, R.S. ; Champion, T.G.

LLSIM is an easily configurable network simulator that can produce a wide variety of data sets without expensive testbeds. These data sets are useful for researchers who are developing general-purpose correlation and response systems. LLSim is a Java-based event-driven simulator consisting of user-configurable core models of networks and hosts with network and host events. Several event generators and models of several intrusion detection sensors were developed On a typical PC workstation, LLSim can emulate arbitrary networks with hundreds of nodes and communication links, and can accurately simulate hundreds of intrusion detection sensors operating in these environments. It can also help researchers evaluate the effectiveness of simple response actions such as altering network firewall policies in response to an attack LLSim has been used to produce datasets used in the DARPA Cyber Panel program.

Published in:

DARPA Information Survivability Conference and Exposition, 2003. Proceedings  (Volume:2 )

Date of Conference:

22-24 April 2003