Evaluation Methodologies for Internet Security Technology

---

Presentations and Demos

• June 15th, 2006 Presentation [27 slides] (665 KB PDF file) | Demo of a TCP-targeted attack experiment (878 KB AVI file)
• June 16th, 2006 Presentation [9 slides] (87 KB PDF file) | Demo of Rocketfuel-to-ns (17.9 MB MPEG file) | Demo of a SYN attack experiment (3.9 MB AVI file) | Demo of a reflection attack experiment (3.5 MB AVI file)

• September 28th, 2005 Presentation [30 slides] (1.984 MB PPT file) | Demo of a TCP-targeted attack experiment (28 MB AVI file)

• October 25th, 2004 Presentation [20 slides] (991 KB PPT file) | DDoS Breakout Session Presentation [14 slides] (817 KB PPT file)
• October 25th, 2004 Demo (21 MB MPEG file) | Demo Description (1.5 KB text file) | Demo of experiment setup (4 MB MPEG file) | Demo of routing setup (6 MB MPEG file)

• June 9th, 2004 Presentation [19 slides] (1164 KB PPT file)
• June 9th, 2004 Demo (28 MB MPEG file) | Demo Description (3 KB text file)

Selected Publications

• J. Mirkovic, B. Wilson, A. Hussain, S. Fahmy, P. Reiher, R. Thomas, S. Schwab, "Automating DoS Experimentation," In Proceedings of the DETER Community Workshop on Cyber Security Experimentation and Test, held in conjunction with USENIX Security, 8 pp., August 2007. [PDF]
• J. Mirkovic, A. Hussain, B. Wilson, S. Fahmy, P. Reiher, R. Thomas, W. Yao, S. Schwab, "Towards User-Centric Metrics for Denial of Service Measurement," In Proceedings of the Workshop on Experimental Computer Science (part of ACM FCRC), 14 pp., June 2007. [PDF] [Related SIGMETRICS 2007 extended abstract]
• Roman Chertov, Sonia Fahmy, Ness B. Shroff, "A Black-box Router Profiler," In Proceedings of the IEEE Global Internet Symposium, 6 pp., May 2007. [PDF] [Correction to Related Work section]
• J. Mirkovic, S. Wei, A. Hussain, B. Wilson, R. Thomas, S. Schwab, S. Fahmy, R. Chertov, P. Reiher, "DDoS Benchmarks and Experimenter's Workbench for the DETER Testbed," In Proceedings of 3rd International IEEE/CreateNet Conference on Testbeds and Research Infrastructures for the Development of Networks and Communities (TridentCom), 7 pp., May 2007. [PDF]
• High-fidelity DoS Simulation and Emulation Experiments, poster, CERIAS symposium, March 2007.

• Jelena Mirkovic, Peter Reiher, Sonia Fahmy, Roshan Thomas, Alefiya Hussain, Steven Schwab, Calvin Ko, "Measuring Denial of Service," In Proceedings of the second workshop on Quality of Protection (QoP), in conjunction with ACM CCS, pp. 53-58, October 2006. [PDF]
• R. Chertov, S. Fahmy, N. B. Shroff, "Emulation versus Simulation: A Case Study of TCP-Targeted Denial of Service Attacks," In Proceedings of 2nd International IEEE/CreateNet Conference on Testbeds and Research Infrastructures for the Development of Networks and Communities (TridentCom), March 2006. [PDF]
• R. Chertov, S. Fahmy, N. B. Shroff, "High Fidelity Denial of Service (DoS) Experimentation," In Proceedings of the DETER Community Workshop on Cyber Security Experimentation, June 2006. [PDF]
• R. Chertov, S. Fahmy, P. Kumar, D. Bettis, A. Khreishah, N. B. Shroff, "Topology Generation, Instrumentation, and Experimental Control Tools for Emulation Testbeds," In Proceedings of the DETER Community Workshop on Cyber Security Experimentation, June 2006. [PDF]
• A. Hussain, S. Schwab, R. Thomas, S. Fahmy, J. Mirkovic, "DDoS Experiment Methodology," In Proceedings of the DETER Community Workshop on Cyber Security Experimentation, June 2006. [PDF]
• J. Mirkovic, S. Fahmy, P. Reiher, R. Thomas, A. Hussain, S. Schwab, C. Ko, "Measuring Impact of DoS Attacks," In Proceedings of the DETER Community Workshop on Cyber Security Experimentation, June 2006. [PDF]
• J. Mirkovic, E. Arikan, S. Wei, S. Fahmy, R. Thomas, P. Reiher, "Benchmarks for DDoS Defense Evaluation," In Proceedings of the DETER Community Workshop on Cyber Security Experimentation, June 2006. [PDF]

• Emulation vs. Simulation: A Case Study with DoS Attacks, and Experiment Automation and Topology Generation Tools for the DETER Testbed, posters, CyberTrust PI meeting, September 2005.
• S. Sellke, N. B. Shroff, S. Bagchi, "Modeling and Automated Containment of Worms," In Proceedings of the International Conference on Dependable Systems and Networks (DSN), Yokohama, Japan, June 28-July 1, 2005. [PDF]
• Evaluation Methodologies for Internet Security Technologies, poster, CERIAS symposium, March 2005.

• R. Bajcsy et al. (24 authors), "Cyber Defense Technology Networking and Evaluation," Communications of the ACM, volume 47, issue 3, pp. 58-61, March 2004. [PDF]
• Evaluation Methods for Internet Security Technologies, poster, CERIAS symposium, March 2004.

This project is being funded by the National Science Foundation (NSF) grant CNS-0523249. Earlier work was also funded by NSF/Department of Homeland Security (DHS) grant CNS-0335247 and a subcontract from the University of Delaware.