{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,15]],"date-time":"2025-07-15T03:24:35Z","timestamp":1752549875862,"version":"3.40.3"},"publisher-location":"Cham","reference-count":35,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319607733"},{"type":"electronic","value":"9783319607740"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Analyzing network environments for security flaws and assessing new service and infrastructure configurations in general are dangerous and error-prone when done in operational networks. Therefore, <jats:italic>cloning<\/jats:italic> such networks into a dedicated test environment is beneficial for comprehensive testing and analysis without impacting the operational network. To automate this reproduction of a network environment in a physical or virtualized testbed, several key features are required: (a) a suitable network model to describe network environments, (b) an automated acquisition process to instantiate this model for the respective network environment, and (c) an automated setup process to deploy the instance to the testbed.<\/jats:p><jats:p>With this work, we present INSALATA, an automated and extensible framework to reproduce physical or virtualized network environments in network testbeds. INSALATA employs a modular approach for data acquisition and deployment, resolves interdependencies in the setup process, and supports just-in-time reproduction of network environments. INSALATA is open source and available on Github. To highlight its applicability, we present a real world case study utilizing INSALATA.<\/jats:p>","DOI":"10.1007\/978-3-319-60774-0_3","type":"book-chapter","created":{"date-parts":[[2017,6,16]],"date-time":"2017-06-16T12:23:19Z","timestamp":1497615799000},"page":"30-44","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Achieving Reproducible Network Environments with INSALATA"],"prefix":"10.1007","author":[{"given":"Nadine","family":"Herold","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Matthias","family":"Wachs","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marko","family":"Dorfhuber","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christoph","family":"Rudolf","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stefan","family":"Liebald","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Georg","family":"Carle","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,6,17]]},"reference":[{"key":"3_CR1","unstructured":"GEANT2 common Network Information Service (cNIS) Schema Specification. http:\/\/www.geant2.net"},{"key":"3_CR2","unstructured":"traceroute(8) - Linux man page. linux.die.net\/man\/8\/traceroute"},{"key":"3_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1007\/978-3-319-29968-6_2","volume-title":"Graphical Models for Security","author":"V Ahlers","year":"2016","unstructured":"Ahlers, V., Heine, F., Hellmann, B., Kleiner, C., Renners, L., Rossow, T., Steuerwald, R.: Integrated visualization of network security metadata from heterogeneous data sources. In: Mauw, S., Kordy, B., Jajodia, S. (eds.) GraMSec 2015. LNCS, vol. 9390, pp. 18\u201334. Springer, Cham (2016). doi:10.1007\/978-3-319-29968-6_2"},{"key":"3_CR4","doi-asserted-by":"crossref","unstructured":"Benzel, T.: The science of cyber security experimentation: the DETER project. In: Proceedings of 27th Annual Computer Security Applications Conference, pp. 137\u2013148 (2011)","DOI":"10.1145\/2076732.2076752"},{"key":"3_CR5","unstructured":"Bifulco, R., Stasi, G.D., Canonico, R.: NEPTUNE for fast and easy deployment of OMF virtual network testbeds [Poster Abstract] (2010)"},{"key":"3_CR6","doi-asserted-by":"crossref","unstructured":"Birkholz, H., Sieverdingbeck, I., Sohr, K., Bormann, C.: IO: an interconnected asset ontology in support of risk management processes. In: 7th International Conference on Availability, Reliability and Security (ARES), pp. 534\u2013541 (2012)","DOI":"10.1109\/ARES.2012.73"},{"key":"3_CR7","doi-asserted-by":"crossref","unstructured":"Carpen-Amarie, A., Cai, J., Costan, A., Antoniu, G., Boug, L.: Bringing introspection into the BlobSeer data-management system using the MonALISA distributed monitoring framework. In: International Conference on Complex, Intelligent and Software Intensive Systems (CISIS), pp. 508\u2013513 (2010)","DOI":"10.1109\/CISIS.2010.37"},{"key":"3_CR8","doi-asserted-by":"crossref","unstructured":"Case, J.D., Fedor, M., Schoffstall, M.L., Davin, J.R.: Simple network management protocol (SNMP). RFC 1157, IETF, May 1990","DOI":"10.17487\/rfc1157"},{"key":"3_CR9","unstructured":"DeHaan, M.: Ansible (2012\u20132016). https:\/\/www.ansible.com\/"},{"key":"3_CR10","doi-asserted-by":"publisher","first-page":"195","DOI":"10.1007\/978-3-319-19249-9_13","volume-title":"FM 2015: Formal Methods","author":"Cornelius Diekmann","year":"2015","unstructured":"Diekmann, C., Hupel, L., Carle, G.: Semantics-preserving simplification of real-world firewall rule sets. In: 20th International Symposium on Formal Methods, pp. 195\u2013212 (2015)"},{"key":"3_CR11","doi-asserted-by":"crossref","unstructured":"Dobre, C., Voicu, R., Legrand, I.: Monitoring large scale network topologies. In: IEEE 6th International Conference on Intelligent Data Acquisition and Advanced Computing Systems (IDAACS), vol. 1, pp. 218\u2013222 (2011)","DOI":"10.1109\/IDAACS.2011.6072744"},{"issue":"1","key":"3_CR12","first-page":"61","volume":"20","author":"M Fox","year":"2003","unstructured":"Fox, M., Long, D.: PDDL2.1: an extension to PDDL for expressing temporal planning domains. J. Artif. Int. Res. 20(1), 61\u2013124 (2003)","journal-title":"J. Artif. Int. Res."},{"issue":"8","key":"3_CR13","doi-asserted-by":"publisher","first-page":"2553","DOI":"10.1016\/j.compeleceng.2013.08.011","volume":"39","author":"M Ghijsen","year":"2013","unstructured":"Ghijsen, M., van der Ham, J., Grosso, P., Dumitru, C., Zhu, H., Zhao, Z., de Laat, C.: A semantic-web approach for modeling computing infrastructures. Comput. Electr. Eng. 39(8), 2553\u20132565 (2013)","journal-title":"Comput. Electr. Eng."},{"key":"3_CR14","unstructured":"van der Ham, J., Dijkstra, F., Apacz, R., Zurawski, J.: Network Markup Language Base Schema version 1 (2013)"},{"key":"3_CR15","unstructured":"van der Ham, J., Dijkstra, F., Lapacz, R., Brown, A.: The Network Markup Language (NML): A Standardized Network Topology Abstraction for Inter-domain and Cross-layer Network Applications (2013)"},{"key":"3_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-642-24455-1_1","volume-title":"KI 2011: Advances in Artificial Intelligence","author":"J Hoffmann","year":"2011","unstructured":"Hoffmann, J.: Everything you always wanted to know about Planning. In: Bach, J., Edelkamp, S. (eds.) KI 2011. LNCS, vol. 7006, pp. 1\u201313. Springer, Heidelberg (2011). doi:10.1007\/978-3-642-24455-1_1"},{"key":"3_CR17","unstructured":"van der Ham, J.J.: A semantic model for complex computer networks: the network description language. Ph.D. thesis, University of Amsterdam (2010)"},{"key":"3_CR18","doi-asserted-by":"crossref","unstructured":"Jiang, X., Xu, D.: vBET: A VM-based emulation testbed. In: Proceedings of ACM SIGCOMM Workshop on Models, Methods and Tools for Reproducible Network Research, pp. 95\u2013104 (2003)","DOI":"10.1145\/944773.944789"},{"key":"3_CR19","doi-asserted-by":"crossref","unstructured":"Lorenzin, L., Cam-Winget, N.: Security automation and continuous monitoring (SACM) requirements. Internet-Draft draft-ietf-sacm-requirements-15, Internet Engineering Task Force (2016)","DOI":"10.17487\/RFC8248"},{"key":"3_CR20","unstructured":"Lyon, G.: nmap(1) - Linux man page (2015)"},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"McCloghrie, K., Rose, M.: Management information base for network management of TCP\/IP-based internets. RFC 1156, IETF, May 1990","DOI":"10.17487\/rfc1156"},{"key":"3_CR22","unstructured":"McDermott, D., Ghallab, M., Howe, A., Knoblock, C., Ram, A., Veloso, M., Weld, D., Wilkins, D.: PDDL - the planning domain definition language (1998)"},{"key":"3_CR23","unstructured":"OpenVAS: Project Homepage. http:\/\/www.openvas.org\/"},{"key":"3_CR24","doi-asserted-by":"crossref","unstructured":"Owezarski, P., Berthou, P., Labit, Y., Gauchard, D.: LaasNetExp: a generic polymorphic platform for network emulation and experiments. In: Proceedings of 4th International Conference on Testbeds and Research Infrastructures for the Development of Networks & Communities, no. 24, pp. 1\u20139 (2008)","DOI":"10.4108\/tridentcom.2008.3225"},{"key":"3_CR25","doi-asserted-by":"crossref","unstructured":"Pisa, P.S., Couto, R.S., Carvalho, H.E.T., Neto, D.J.S., Fernandes, N.C., Campista, M.E.M., Costa, L., Duarte, O., Pujolle, G.: VNEXT: Virtual network management for Xen-based testbeds. In: International Conference on the Network of the Future (NOF 2011), pp. 41\u201345 (2011)","DOI":"10.1109\/NOF.2011.6126680"},{"key":"3_CR26","unstructured":"Puppet Labs: Puppet (2005\u20132016). https:\/\/puppet.com\/"},{"key":"3_CR27","doi-asserted-by":"crossref","unstructured":"Enns, R., Bjorklund, M., Schoenwaelder, J., Bierman, A.: Network configuration protocol (NETCONF). RFC 6241, IETF, June 2011","DOI":"10.17487\/rfc6241"},{"key":"3_CR28","unstructured":"Taketa, T., Hiranaka, Y.: Network design assistant system based on network description language. In: 15th International Conference on Advanced Communication Technology (ICACT), pp. 515\u2013518 (2013)"},{"key":"3_CR29","doi-asserted-by":"crossref","unstructured":"Tierney, B., Metzger, J., Boote, J., Boyd, E., Brown, A., Carlson, R., Zekauskas, M., Zurawski, J., Swany, M., Grigoriev, M.: perfSONAR: instantiating a global network measurement framework. In: SOSP Workshop on Real Overlays and Distributed Systems (ROADS 2009). ACM (2009)","DOI":"10.2172\/946807"},{"key":"3_CR30","unstructured":"Trusted Network Connect Work Group: TNC IF-MAP Bindings for SOAP, Version 2.2, Revision 10 (2014)"},{"key":"3_CR31","unstructured":"Trusted Network Connect Work Group: TNC MAP Content Authorization, Version 1.0, Revision 36 (2014)"},{"key":"3_CR32","unstructured":"Undercoffer, J., Pinkston, J., Joshi, A., Finin, T.: A target-centric ontology for intrusion detection. In: Proceeding of 9th Workshop on Ontologies and Distributed Systems, pp. 47\u201358 (2004)"},{"key":"3_CR33","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"165","DOI":"10.1007\/978-3-319-30505-9_13","volume-title":"Passive and Active Measurement","author":"M Wachs","year":"2016","unstructured":"Wachs, M., Herold, N., Posselt, S.-A., Dold, F., Carle, G.: GPLMT: a lightweight experimentation and testbed management framework. In: Karagiannis, T., Dimitropoulos, X. (eds.) PAM 2016. LNCS, vol. 9631, pp. 165\u2013176. Springer, Cham (2016). doi:10.1007\/978-3-319-30505-9_13"},{"key":"3_CR34","doi-asserted-by":"crossref","unstructured":"White, B., Lepreau, J., Stoller, L., Ricci, R., Guruprasad, S., Newbold, M., Hibler, M., Barb, C., Joglekar, A.: An integrated experimental environment for distributed systems and networks. pp. 255\u2013270 (2002)","DOI":"10.1145\/844128.844152"},{"key":"3_CR35","unstructured":"Yarochkin, F., Arkin, O., Kydyraliev, M.: xprobe2(1) - Linux man page"}],"container-title":["Lecture Notes in Computer Science","Security of Networks and Services in an All-Connected World"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-60774-0_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,11]],"date-time":"2023-07-11T14:03:07Z","timestamp":1689084187000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-60774-0_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319607733","9783319607740"],"references-count":35,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-60774-0_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"17 June 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"AIMS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on Autonomous Infrastructure, Management and Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Zurich","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Switzerland","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10 July 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 July 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"aims2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}