RINSE: The Real-Time Immersive Network Simulation Environment for Network Security Exercises

Abstract

The RINSE simulator is being developed to support large-scale network security preparedness and training exercises, involving hundreds of players and a modeled network composed of hundreds of LANs. The simulator must be able to present a realistic rendering of network behavior as attacks are launched and players diagnose events and try counter measures to keep network services operating. We describe the architecture and function of RINSE and outline how techniques like multiresolution traffic modeling and new routing simulation methods are used to address the scalability challenges of this application. We also describe in more detail new work on CPU/memory models necessary for the exercise scenarios and a latency absorption technique that will help when extending the range of client tools usable by the players.

Physical Simulators of Critical Infrastructures

“…iSSFNet [5] network simulator relies on common API for parallel simulation of networks, the scalable simulation framework (SSF). Based on iSSFNet, a network viewer module of the simulation environment (RINSE) allows to have different views of the simulated network as well as to execute commands such as attacks and defenses commands and try specific countermeasures to preserve the services delivery of the network.…”

A Framework for Automated Identification of Attack Scenarios on IT Infrastructures

“…Wei et al [23] focus on epidemiological models of worm prop-agation and developed for this a distributed simulation tool. Another example is Liljenstam et al [24], they describe in their work the simulation tool RINSE. The focus of their tool is to create distributed simulation environment that is capable to interact with human during a simulation and allow them to issue commands.…”

Using an Emulation Testbed for Operational Cyber Security Exercises

“…Unlike a network simulator [10], an emulation testbed addresses this issue because participants can interact with a realistic IP network that could be based on real routers or on software routers like Quagga. Although software routers are not a replacement for real routers, they permit the testbed to scale to much larger topologies while maintaining a certain degree of fidelity.…”