Automated Discovery for Emulytics Publication

Describes automated methods and tools for discovering information systems through network and host analysis to create high-fidelity emulation models, demonstrated on SCinet with 5 routers and 10,000 endpoints.

Quantifying Uncertainty in Emulations: LDRD Report Publication

Sandia LDRD report summarizing a three-year project to quantify behavioral (not performance) differences between emulations and real-world systems by running representative workloads on both and comparing collected metrics.

Lessons learned from 10k experiments to compare virtual and physical testbeds Publication

Documents lessons learned from running over 10,000 experiments and processing half a petabyte of data to quantify behavioral (not just performance) differences between virtual and physical testbeds for cyber security research.

Virtually the same: Comparing physical and virtual testbeds Publication

Comparative analysis quantifying behavioral differences between physical and virtual testbeds for cyber security research to assess the fidelity of virtualized environments for experimentation.

discovery toolset Project

Automated toolset that transforms network and host discovery data into high-fidelity emulation models, demonstrated by modeling SCinet’s 10,000 endpoints and enabling rapid Emulytics experimentation.

minimega toolset Project

Fast, lightweight distributed VM orchestration platform that scales from laptops to massive clusters with virtually no setup, enabling large-scale cyber security experiments and emulation testbeds.