DESIGN AND IMPLEMENTATION OF A DEVS- BASED CYBER-ATTACK SIMULATOR FOR CYBER SECURITY

Abstract

The necessity of conducting business processes of institutions and individuals with information technologies has brought risks and threats. Cyber-attacks may lead to hard-to-recover results. Although many security systems have been developed against to these attacks, attacks and security breaches of information systems are increasing rapidly. In this study, it is aimed to understand the security weaknesses and vulnerabilities, which is one of the most important issues at the point of providing cyber security, and to detect cyber-attacks. Using physical networks to test cyber-attack methods is a very costly and time consuming process. In this paper, as a different method, a cyber-attack simulation model has been developed using the DEVS modelling approach to simulate and test cyber-attack scenarios and evaluate the results. An application has been developed that simulates an attack scenario in a virtual network and evaluates detector alerts by generating appropriate intrusion detection system signals. The DEVS-Suite simulation environment was used as a development environment. Comparisons were made with different cyber-attack simulation applications and their differences were revealed.