Simulating SQL-Injection Cyber-Attacks Using GNS3

Abstract

Abstract-Network Forensics is a subtopic of Digital Forensics wherein research on artificat investigations and intrusions evidence acquisition is addressed. Among many challenges in the field, the problem of losing data artifacts in the state of flux, (i.e., live volatile data), when network devices are suddenly non-operational remains a topic of interest to many investigators. The main objective of this article is to simulate an SQL injection attack scenarios in a complex network environment. We designed and simulated a typical demilitarized zone (DMZ) network environment using graphical network simulator (GNS3), Virtual Box and VMware workstation. Using this set-up we are now able to simulate specific network devices configuration, perform SQL injection attacks against victim machines and collect network logs. The main motivation of our work is to finally define an attack pathway prediction methodology that makes it possible to examine the network artifacts collected in case network attacks.

Experiences on Evaluating Network Simulators: A Methodological Approach

“…In [34], the simulator works as a simulation testbed for several of IPv6 attack scenarios, GNS3 emulates different IOS for Cisco routers in the proposed scenarios. GNS3 is used to simulate an SQL-insertion cyber-attack in [35].…”

Efficiency of network event logs as admissible digital evidence

“…This section presents a simulated sandbox that allows us to perform experiment from our real assets and at low cost and risk.We proposed earlier Simulation SQL Injection Cyberattack using GNS3 [23]. Figure 1 shows the simulation of Honeynet Network and SQL injection attack.…”

Cyberspace Forensics Readiness and Security Awareness Model

“…The simulation approaches also helps to simplify the incidence (1 Image = 1000 words). The current study [17] proposes Investigation learning methodology based on the proposed case study. The learning methodology consists of two stages; stage one is to build a network topology of the proposed case study and stage two is to create a network union Matrix.…”

“…The authors [17] presented a simulation study network attack scenario. This is the first step towards validating the proposed model.…”