# # Small example to illustrate the worm scan traffic model. # Models two ASes with a single user host and a BGP-speaking gateway router # each at the 'microscopic level'. At the macroscopic level, the ASes contain # 30% and 70% each of 360000 vulnerable hosts (CRv2). Infection parameter # and removal function is based on Code Red v2. # # Each border router in the two modeled ASes keep report the scan traffic # hitting them from within. # # topology: each network # 0(0) 'Router 0' 0(1) ------------- 1(0) 'Host 1' _schema [_find .schemas.Net] Net [ frequency 1000000000 worm_model [ stratified_on true # stratified model (by AS) as_graph ex_as_topology.adj # AS level topology file (adjacencies) Epidemic [ s_0 359999 # number of susceptible hosts (initially) =N-1 i_0 1 # number of infected hosts (initially) beta 1.235e-9 # infection parameter =(1.6/3600)/N initializer SSF.App.Worm.test.TestWormEpidemicInitializer gamma_function SSF.App.Worm.CodeRedGammaFunction # removal process ] Traffic [ use SSF.App.Worm.MeanRateWormTraffic ] debug true ] Net [ id 0 AS_status boundary AS_num 557 # ASN 557, just some AS with outdegree one in the adjacency file ospf_area 0 router [ id 0 interface [ id 0 _extends .dictionary.1Mb ] interface [ id 1 _extends .dictionary.100Mb ] _find .dictionary.routerGraph.graph ] host [ id 1 interface [ id 0 _extends .dictionary.100Mb ] _find .dictionary.clientGraph.graph ] link [ attach 0(1) attach 1(0) delay 0.003 ] ] Net [ id 1 AS_status boundary AS_num 1351 # ASN 1351, another AS with outdegree one in the adjacency file ospf_area 0 router [ id 0 interface [ id 0 _extends .dictionary.1Mb ] interface [ id 1 _extends .dictionary.100Mb ] _find .dictionary.routerGraph.graph ] host [ id 1 interface [ id 0 _extends .dictionary.100Mb ] _find .dictionary.clientGraph.graph ] link [ attach 0(1) attach 1(0) delay 0.003 ] ] ] # =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= dictionary [ # interface specs 1Mb [ bitrate 1000000 # 1 million bits per second latency 0.0001 # 0.1 ms NIC latency, in seconds (on-card delay) ] 100Mb [ bitrate 100000000 # 100 million bits per second latency 0.0001 # 0.1 ms NIC latency, in seconds (on-card delay) ] # protocol graphs routerGraph [graph [ ProtocolSession [ name GatewayProtocolSession use SSF.App.Worm.GatewayProtocolSession debug true ] ProtocolSession [name bgp use SSF.OS.BGP4.BGPSession] ProtocolSession [ name socket use SSF.OS.Socket.socketMaster ] ProtocolSession [ name tcp use SSF.OS.TCP.tcpSessionMaster warn false ] ProtocolSession [name ip use SSF.OS.IP] ProtocolSession [name ospf use SSF.OS.OSPF.sOSPF] ]] clientGraph [graph [ ProtocolSession [ name WormProtocolSession use SSF.App.Worm.WormProtocolSession debug true ] ProtocolSession [name ip use SSF.OS.IP] ] ]