Modeling Network Traffic Generators for Cyber Ranges: A Systematic Literature Review

Abstract

Abstract Cyber ranges have evolved into indispensable environments for training personnel in the field of cyber defense. A critical aspect of enhancing the authenticity of these simulations involves the use of traffic generators, which accurately replicate real network traffic patterns. This article delves into the paramount role played by traffic generators within cyber ranges, highlighting their pivotal contribution to equipping personnel with the skills needed to respond adeptly to cyber threats. To address the modeling and validation of traffic generators comprehensively, it is essential to consider diverse approaches in cyber range training. To shed light on this subject, this review adopts a modified Scopus-based search methodology, providing in-depth insights into the methodologies and validation methods associated with traffic generator modeling and validation. The analysis concluded that the traffic generators used for computer network security training purposes can be broadly categorized into three main methodologies: model-based, trace-based, and hybrid approaches. Each of these methodologies has its own set of applications, limitations, and advantages. These factors have a direct influence on the validation parameters associated with these methodologies.