Using Realistic Network Traffic to Create a High-Fidelity Training Environment

Skaion proposes to create an automated training system using realistic network traffic (whether stored, replayed, or generated using Skaion's existing Traffic Generation System). During Phase I, Skaion will analyze this approach for the IDS analyst domain. Skaion will research which situations are most effective for testing, and derive test scenarios that illustrate the lessons we wish to teach. Skaion will create a proof-of-concept environment using a real Network Intrusion Detection System (NIDS) system by implementing prototype test scenarios. These test scenarios will use background traffic generated by Skaion's Traffic Generation System, overlaid by attacks created via open source probing and attack tools such as nmap and Metasploit. Generalized knowledge and skill training with these test scenarios can be applied to a variety of COTS and GOTS NIDS systems - low-level network traffic fidelity keeps the training technology vendor-independent.