چکیده (انگلیسی):

Due to the increasing amount of data traveling computer
networks every day, efficient management of this information is required to
ensure the quality of the services provided by them. Development of new
network management tools and mechanisms is a widely approached area
due to its importance, not only to the current technology, but also to next
generation network standards and equipments. Several researches have
been directed to the use of IP Flows in order to increase the efficiency of
these management tools. Although there are several proposed approaches in
this area, most of them don’t have suitable test scenarios to validate their
performance results. In this study, we present Scorpius, a new simulation
tool able to help testing network management mechanisms based on IP
Flows. Scorpius is capable of simulating different kinds of anomalies, such
as Denial of Service (DoS), Distributed Denial of Service (DDoS), Flash
Crowd and Port Scan, directly into the flow export files. This characteristic
unites the advantages of tests in real network environments without the
drawbacks of the occurrence of real anomalies and attacks, even controlled
ones. This approach makes the processes of performance analysis of anomaly
detection approaches easier, without interfering or hampering the operation of
the analyzed network. In order to validate the efficiency of the presented tool,
we use real data collected from a large-scale network environment.