The Role of Modeling and Simulation in Information Security by Mohammad Heidari

There is a spate of papers and tools on using Modeling and Simulation (M&S) for testing Denial of Service- (DoS), virus and worm (Propagation, attacks) against computer networks, but this is not a whole story, there is not any explicit M&S tool for testing computer/network security and network attack modeling. In the other words, it seems that Computer Simulation was studied and investigated in many areas but the field of Computer Security has not produced significant research results in this area to date! It goes without saying that M&S is used to understand and develop complex system, it is used to provide analysis and insight into building better systems. M&S is also an effective tool to save time and money during development and implementation. In the field of Information Security, Models and tools for simulation of computer and network security can facilitate the development of more secure robust and safer computer network infrastructures. Unfortunately, today many computer networks were constructed without any virtually backgrounds in modeling and simulating for testing different kinds of computer network attacks and their impacts on computer and networks. In this paper, I try to explain the applications of M&S for modeling and simulation of computer/network security. This article also tries to analyze the current state of M&S in the field of information security, and presents new suggestions to solve the problems in modeling and simulating in the field of Information Security.
http://www.infosecwriters.com/text_resources/pdf/MandS_MHeidari.pdf