Spamulator: the Internet on a laptop

ABSTRACT

We have developed an Internet simulator - the "Spamulator" - for a course on spam and spyware, a simulator that allows us to simulate the network services provided by a million domains. The Spamulator is lightweight in its resource usage, running on a single computer, and we currently have implementations for two different platforms.

Students interact with the Spamulator using unmodified client software, like web browsers. Alternatively, students can write their own software to use the simulated Internet using any programming language, without contrived constraints or special libraries. Furthermore, the Spamulator is extensible, making it useful as a research tool. It could easily be used for assignments on networking, peer-to-peer networks, distributed systems, and its lightweight nature allows large-scale experiments to be conducted even by underequipped institutions.

We discuss the motivation, design, and implementation of the Spamulator, and our experience with it in the spam and spyware class.

REFERENCES

• 1: J. Aycock. Teaching spam and spyware at the University of C@1g4ry. In Third Conference on Email and Anti-Spam, pages 137--141, 2006. Short paper.
• 2: D. Barbosa, A. O. Mendelzon, J. Keenleyside, and K. Lyons. ToXgene: An extensible template-based data generator for XML. In Fifth International Workshop on the Web and Databases, 2002.
• 3: T. Benzel, R. Braden, D. Kim, and C. Neuman. Design, deployment, and use of the DETER testbed. In Proceedings of the DETER Community Workshop on Cyber-Security and Test, 2007.
• 4: B. D. Cone, C. E. Irvine, M. F. Thompson, and T. D. Nguyen. A video game for cyber security training and awareness. Computers & Security, 26(1):63--72, 2007.
• 5: D. Duchamp and G. DeAngelis. A hypervisor based security testbed. In Proceedings of the DETER Community Workshop on Cyber-Security and Test, 2007.
• 6: Emulab, last accessed 17 December 2007. http://www.emulab.net.
• 7: B. Kneale, A. Y. De Horta, and I. Box. VELNET (Virtual Environment for Learning Networking). In 6th Australasian Computing Education Conference, pages 161--168, 2004.
• 8: J.-V. Loddo and L. Saiu. Status report: Marionnet, or "how to implement a virtual network laboratory in six months and be happy". In Proceedings of the 2007 Workshop on ML, pages 59--70, 2007.
• 9: M. Micco and H. Rossman. Building a cyberwar lab: Lessons learned teaching cybersecurity principles to undergraduates. In Proceedings of the 33rd SIGCSE Technical Symposium on Computer Science Education, pages 23--27, 2002.
• 10: S. Miwa, T. Miyachi, M. Eto, M. Yoshizumi, and Y. Shinoda. Design and implementation of an isolated sandbox with mimetic Internet used to analyze malwares. In Proceedings of the DETER Community Workshop on Cyber-Security and Test, 2007.
• 11: PlanetLab, last accessed 17 December 2007. http://www.planet-lab.org/.
• 12: N. Provos. A virtual honeypot framework. In 13th USENIX Security Symposium, pages 1--14, 2004.
• 13: S. Sarafijanovic, L. Hernandez, R. Naefen, and J.-Y. Le Boudec. AntispamLab ? a tool for realistic evaluation of email spam filters. In Fourth Conference on Email and Anti-Spam, 2007.
• 14: J. Stewart. Behavioural malware analysis using sandnets. Computer Fraud & Security, pages 4--6, Dec. 2006.
• 15: M. Vrable, J. Ma, D. Moore, E. Vandekieft, A. C. Snoeren, G. M. Voelker, and S. Savage. Scalability, fidelity, and containment in the Potemkin virtual honeyfarm. In Proceedings of the Twentieth ACM Symposium on Operating Systems Principles, pages 148--162, 2005.
• 16: J. Walden. A real-time information warfare exercise on a virtual network. In Proceedings of the 36th SIGCSE Technical Symposium on Computer Science Education, pages 86--90, 2005.
• 17: T. Wulf. Implementing a minimal lab for an undergraduate network security course. Journal of Computing Sciences in Colleges, 19(1):94--98, 2003.
• 18: V. Yegneswaran, P. Barford, and D. Plonka. On the design and use of Internet sinks for network abuse monitoring. In Proceedings of the 7th International Symposium on Recent Advances in Intrusion Detection (LNCS 3224), pages 146--165, 2004.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.1 Computer Uses in Education
          Subjects: Computer-assisted instruction (CAI)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Invasive software (e.g., viruses, worms, Trojan horses)

  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education

General Terms:
Experimentation, Security

Keywords:
education, internet, security, simulation, spam, spyware