Simulated, Emulated, and Physical Investigative Analysis (SEPIA) of networked systems.

Technical Report · Tue Sep 01 04:00:00 EDT 2009

DOI:https://doi.org/10.2172/972865· OSTI ID:972865

Burton, David P; Van Leeuwen, Brian P; McDonald, Michael James; Onunkwo, Uzoma A; Tarman, Thomas David; Urias, Vincent E

This report describes recent progress made in developing and utilizing hybrid Simulated, Emulated, and Physical Investigative Analysis (SEPIA) environments. Many organizations require advanced tools to analyze their information system's security, reliability, and resilience against cyber attack. Today's security analysis utilize real systems such as computers, network routers and other network equipment, computer emulations (e.g., virtual machines) and simulation models separately to analyze interplay between threats and safeguards. In contrast, this work developed new methods to combine these three approaches to provide integrated hybrid SEPIA environments. Our SEPIA environments enable an analyst to rapidly configure hybrid environments to pass network traffic and perform, from the outside, like real networks. This provides higher fidelity representations of key network nodes while still leveraging the scalability and cost advantages of simulation tools. The result is to rapidly produce large yet relatively low-cost multi-fidelity SEPIA networks of computers and routers that let analysts quickly investigate threats and test protection approaches.

• Research Organization: Sandia National Laboratories
• Sponsoring Organization: USDOE
• DOE Contract Number: AC04-94AL85000
• OSTI ID: 972865
• Report Number(s): SAND2009-5996
• Country of Publication: United States
• Language: English

Related Subjects

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL PROTECTION
COMPUTERS
Computer Information Security
Information technology-Security measures.
Internet (Computer network)-Security measures.
RELIABILITY
SAFEGUARDS
SECURITY
SIMULATION