Network security agent DEVS simulation modeling

Abstract

Networks are exploding in scale, while their costs are plummeting, and as new applications are rapidly deployed to consume these vast new networking resources, security is becoming of paramount importance. Policy-based Internet management approaches are moving closer to maturity. Configuring a large number of routers, bridges, or servers using generic rules instead of individual configuration appears to be less complex, less error-prone and more flexible. This paper describes the design and modeling of network security agents based on policy-based framework, which has some inherent merits. The need arises for systems to coordinate with one another, to manage a range of malicious attacks across networks at any time. We performed modeling of the network components that include an intrusion detection system, firewall, single sign-on technology, and policy-based framework. The authentication for the network system access is achieved using single sign-on technology. We present modeling methodology for network security agents, which are identified as a component of policy-based network management. Each component is implemented as a hybrid design utilizing modeling concepts from Discrete EVent system Specification (DEVS) formalism and problem-solving concepts from BlackBoard Architecture (BBA) of Artificial Intelligence (AI).