Changes between Version 20 and Version 21 of ExDescLang
- Timestamp:
- Oct 11, 2010 2:30:03 PM (14 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
ExDescLang
v20 v21 4 4 5 5 I'll start with a few examples of experiments first, that we should be able to design in this language. 6 1. A botnet experiment where a worm infects some vulnerable hosts, they organize into a P2P botnet with some botmaster and start exchanging C&C traffic. Experimenter wants to observe the evolution of the botnet and the amount of traffic that master receives. There are t hreeclasses of experiments here that need to be combined together:6 1. A botnet experiment where a worm infects some vulnerable hosts, they organize into a P2P botnet with some botmaster and start exchanging C&C traffic. Experimenter wants to observe the evolution of the botnet and the amount of traffic that master receives. There are two classes of experiments here that need to be combined together: 7 7 a. an experiment where worm spreads and infects vulnerable hosts 8 b. an experiment where some hosts organize into P2P network and somehow elect a botmaster 9 c. an experiment where peers start exchanging some C&C botnet traffic 8 b. an experiment where some hosts organize into P2P network and somehow elect a leader who then sends commands to them and they may send reports back 10 9 11 10 2. A cache poisoning experiment where the attacker poisons a DNS cache to take over authority for a given domain. The attacker then creates a phishing page and tries to steal user's usernames/passwords. There are two classes of experiments that need to be combined: … … 35 34 == Example 1: botnet == 36 35 37 This example used 3metadescriptions. Let's go through each of them:36 This example used two metadescriptions. Let's go through each of them: 38 37 39 38 === Worm spread metadescription === … … 41 40 Dimensions: 42 41 * '''Logical topology:''' 43 [[Image( wormobj.jpg)]]44 (in English: There must be two sets of hosts, at least one infected host in infected set and at least one vulnerable host in vulnerable set. There can be a third set of hosts that are not vulnerable or infected. All these sets are disjoint.)42 [[Image(peerobj.jpg)]] 43 (in English: There must be two sets of hosts, at least two eligible peers and at least one leader. Nothing is said about relationship between sets so it's possible that there's an intersection between those that is non-empty.) 45 44 * '''Timeline of events: ''' 46 45 [[Image(wormwf.jpg)]]
