SEA++: A Framework for Evaluating the Impact of Security Attacks in OMNeT++/INET

Abstract

This chapter presents SEA++, a simulation framework that extends OM-NeT++/INET for evaluating the impact of security attacks on networks and applications in a flexible and user-friendly way. To this end, SEA++ relies on two fundamental building blocks. First, the user describes the attacks to be evaluated by using a high-level Attack Specification Language (ASL). In particular, only the final effects of such attacks are described, rather than their actual performance. Second, the Attack Simulation Engine (ASE) takes these high-level descriptions as input and accordingly injects attack events at runtime, by means of additional software modules that seamlessly and transparently operate with the other INET modules. This allows the user to quantitatively assess the impact of cyber/physical attacks in simulated network scenarios, and hence rank them according to their severity as a support to risk assessment and selection of countermeasures. As a further advantage, the user is not required to alter any software module or application, or to implement any adversary model for the actual execution of security attacks. Finally, this chapter also includes a step-by-step explicative example showing how to setup and use SEA++ for describing attacks and assessing their impact.

Towards a Cyber Resilience Quantification Framework (Crqf) for it Infrastructure

“…It considers traffic patterns, topology generation, and attack traffic. SEA++ [65] is a framework module that extends from OMNeT++ and INET to evaluate cyber-attacks impact on networks, systems and applications in a user-friendly way. NETA [66] is a framework module built on OMNeT++ simulator and INET framework.…”