28SNU
In order to find the network feedback time for a typical SNU, we simulated a network of 20 nodes, scattered in an area of 150*200 m2. The test was repeated 30 times and the position of the misbehaving nodes were varied to form a valid test. A sample run is presented in Figure 17. The 90 runs were then analysed for their throughput and other network measures using gawk and Excel.
(a)
|
(b)
|
Figure 17- A simulation of a SNU with 20 nodes. (a) The initial flow between two nodes consists of nodes 1, 7, 13, 19 before the attack. (b) The rerouted path after node 7 is affected in the attack and is shut down by the intrusion response system.
The visualised examples of SNU simulations are illustrated in Figure 17. Figure 17-(a) shows initial flow(s) before any interruption or attack. Figure 17-(b) display rerouted paths after some nodes in the initial paths are affected in the attacks and are shut down by the intrusion response system.
Figure 18 illustrates the average throughput of recovered flows of the 30 runs in a SNU when some nodes are affected after the shutdown response. The response causes a rapid drop in throughput and as the network recovers it rises, we can safely say that it has recovered when the throughput reaches the 98% normal curve, which is 98% of the control curve. We found out that in a SNU when 10%, 20% and 50% of nodes are shut down, the throughputs reach 98% of its normal value at 4.3s (Figure 18), 4.9s (Figure 19) and 4.7s (Figure 20), respectively. The 98% mark was calculated from control experiments as the 98% of the average normal throughput curve.
Figure 18-When 10% of nodes misbehaves in an SNU, the throughput reaches 98% of its normal value at 4.3s.
Figure 19-When 20% of nodes misbehaves in an SNU, the throughput reaches 98% of its normal value at 4.9s.
Figure 20-When 50% of nodes misbehaves in an SNU, the throughput reaches 98% of its normal value at 4.7s.
Share with your friends: |
