{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T02:39:43Z","timestamp":1760236783869,"version":"build-2065373602"},"reference-count":31,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2021,12,22]],"date-time":"2021-12-22T00:00:00Z","timestamp":1640131200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972182;62172191"],"award-info":[{"award-number":["61972182;62172191"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key R&amp;D Program of China","award":["2016YFB0800305"],"award-info":[{"award-number":["2016YFB0800305"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Cyber-physical systems (CPSs) based on space-ground integrated networks (SGINs) enable CPSs to break through geographical restrictions in space. Therefore, providing a test platform is necessary for new technical verification and network security strategy evaluations of SGINs. User behavior emulation technology can effectively support the construction of a test platform. Given the inherent dynamic changes, diverse behaviors, and large-scale characteristics of SGIN users, we propose user behavior emulation technology based on a cloud platform. First, the dynamic emulation architecture for user behavior for SGINs is designed. Then, normal user behavior emulation strategy driven by the group user behavior model in real time is proposed, which can improve the fidelity of emulation. Moreover, rogue user behavior emulation technology is adopted, based on traffic replay, to perform the security evaluation. Specifically, virtual Internet Protocol (IP) technology and the epoll model are effectively integrated in this investigation to resolve the contradiction between large-scale emulation and computational overhead. The experimental results demonstrate that the strategy meets the requirement of a diverse and high-fidelity dynamic user behavior emulation and reaches the emulation scale of 100,000-level concurrent communication for normal users and 100,000-level concurrent attacks for rogue users.<\/jats:p>","DOI":"10.3390\/s22010044","type":"journal-article","created":{"date-parts":[[2021,12,23]],"date-time":"2021-12-23T02:02:57Z","timestamp":1640224977000},"page":"44","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Cloud-Based User Behavior Emulation Approach for Space-Ground Integrated Networks"],"prefix":"10.3390","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6309-1945","authenticated-orcid":false,"given":"Leiting","family":"Tao","sequence":"first","affiliation":[{"name":"School of Artificial Intelligence and Computer Science, Jiangnan University, Wuxi 214122, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8105-2897","authenticated-orcid":false,"given":"Xiaofeng","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence and Computer Science, Jiangnan University, Wuxi 214122, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2576-1426","authenticated-orcid":false,"given":"Yuan","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence and Computer Science, Jiangnan University, Wuxi 214122, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence and Computer Science, Jiangnan University, Wuxi 214122, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,12,22]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"524","DOI":"10.1109\/COMST.2020.3036778","article-title":"Resilient machine learning for networked cyber physical systems: A survey for machine learning security to securing machine learning for cps","volume":"23","author":"Olowononi","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Kak, A., and Akyildiz, I. (2021). Towards automatic network slicing for the internet of space things. IEEE Transactions on Network and Service Management, IEEE.","DOI":"10.1109\/TNSM.2021.3117692"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"5542","DOI":"10.1109\/TII.2020.3044576","article-title":"Honeypot Identification in Softwarized Industrial Cyber\u2013Physical Systems","volume":"17","author":"Sun","year":"2020","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"4682","DOI":"10.1109\/JIOT.2020.2969326","article-title":"A Survey on Access Control in the Age of Internet of Things","volume":"7","author":"Qiu","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Zhu, Z., Jiang, R., Jia, Y., Xu, J., and Li, A. (2018, January 8\u201311). Cyber Security Knowledge Graph Based Cyber Attack Attribution Framework for Space-ground Integration Information Network. Proceedings of the 18th International Conference on Communication Technology (ICCT), Chongqing, China.","DOI":"10.1109\/ICCT.2018.8600108"},{"key":"ref_6","first-page":"156","article-title":"Research status and development trends of security assurance for space-ground integration information network","volume":"37","author":"Li","year":"2016","journal-title":"J. Commun."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"1640","DOI":"10.1360\/SSI-2019-0176","article-title":"Integrated security of cyber-physical vehicle networked systems in the age of 5G","volume":"49","author":"Xue","year":"2019","journal-title":"Sci. Sin. Inf."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Qi, Y., Jiang, R., Jia, Y., and Li, A. (2020). Attack Analysis Framework for Cyber-Attack and Defense Test Platform. Electronics, 9.","DOI":"10.3390\/electronics9091413"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Loyola, P., Rom, P., and Vel, J. (2011, January 22\u201327). Clustering-based learning approach for ant colony optimization model to simulate web user behavior. Proceedings of the Conferences on Web Intelligence and Intelligent Agent Technology, Lyon, France.","DOI":"10.1109\/WI-IAT.2011.116"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"173","DOI":"10.1049\/ntw2.12010","article-title":"A novel classification model of collective user web behaviour based on network traffic contents","volume":"10","author":"Liu","year":"2021","journal-title":"IET Networks"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"175","DOI":"10.1142\/S0218194018400028","article-title":"Research Notes: User Identification Model Based on Mouse Behaviors","volume":"28","author":"Wang","year":"2018","journal-title":"Int. J. Softw. Eng. Knowl. Eng."},{"key":"ref_12","unstructured":"Feng, S., Zhu, H., and Lu, G. (2008, January 10\u201312). Dynamic modeling and simulation for LEO satellite networks. Proceedings of the 11th International Conference on Communication Technology, Hangzhou, China."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"1939","DOI":"10.1109\/TII.2021.3082576","article-title":"Multiple Strategies Differential Privacy on Sparse Tensor Factorization for Network Traffic Analysis in 5G","volume":"18","author":"Wang","year":"2021","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"2740","DOI":"10.1109\/TSMC.2017.2690673","article-title":"GPU-Accelerated Parallel Hierarchical Extreme Learning Machine on Flink for Big Data","volume":"47","author":"Chen","year":"2017","journal-title":"IEEE Trans. Syst. Man, Cybern. Syst."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1356","DOI":"10.4028\/www.scientific.net\/AMM.263-266.1356","article-title":"Campus Network Upgrade and Optimization Based on OPNET","volume":"263\u2013266","author":"Zhu","year":"2012","journal-title":"Appl. Mech. Mater."},{"key":"ref_16","unstructured":"Zhao, Y., Yu, H., and Liang, G. (2015, January 21\u201323). NS3-based simulation system in heterogeneous wireless network. Proceedings of the 11th International Conference on Wireless Communications, Networking and Mobile Computing (WiCOM 2015), Shanghai China."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1346325.1346326","article-title":"Efficient simulation of Internet worms","volume":"18","author":"Nicol","year":"2008","journal-title":"ACM Trans. Model. Comput. Simul."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Fan, L., Deng, Z., Wang, K., Lin, W., Li, Z., Yu, X., and Chen, J. (2021, January 7\u20139). Simulation and Analysis of Heterogeneous Traffic of Space-Ground Integrated Information Network Based on OPNET. Proceedings of the 2nd Information Communication Technologies Conference (ICTC), Nanjing, China.","DOI":"10.1109\/ICTC51749.2021.9441498"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Rege, M., Handziski, V., and Wolisz, A. (2013, January 8\u201312). Crowdmeter: An emulation platform for performance evaluation of crowd-sensing applications. Proceedings of the ACM conference on Pervasive and ubiquitous computing adjunct publication, Zurich, Switzerland.","DOI":"10.1145\/2494091.2499578"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Wang, B., Tay, Y., and Golubchik, L. (2013, January 14\u201316). Resource Estimation for Network Virtualization through Users and Network Interaction Analysis. In Proceedings of 21st International Symposium on Modelling, Analysis and Simulation of Computer and Telecommunication Systems, San Francisco, CA, USA.","DOI":"10.1109\/MASCOTS.2013.65"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Fujdiak, R., Uher, V., Mlynek, P., Blazek, P., Slacik, J., Sedlacek, V., Misurec, J., Volkova, M., and Chmelar, P. (2018, January 5\u20139). IP traffic generator using container virtualization technology. Proceedings of the 10th International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT), Moscow, Russia.","DOI":"10.1109\/ICUMT.2018.8631248"},{"key":"ref_22","unstructured":"Calheiros, R., Storch, M., Alexandre, E., De Rose, C., and Breda, M. (November, January 29). Applying virtualization and system management in a cluster to implement an automated emulation testbed for grid applications. Proceedings of the 20th International Symposium on Computer Architecture and High Performance Computing, Campo Grande, Brazil."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s13638-015-0503-2","article-title":"An optimal data service providing framework in cloud radio access network","volume":"2016","author":"Luo","year":"2016","journal-title":"EURASIP J. Wirel. Commun. Netw."},{"key":"ref_24","unstructured":"(2021, December 05). Systems Tool Kit. Available online: https:\/\/agi.com\/products\/stk."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"178","DOI":"10.1109\/MCOM.2018.1700038","article-title":"The Space-Terrestrial Integrated Network: An Overview","volume":"56","author":"Yao","year":"2018","journal-title":"IEEE Commun. Mag."},{"key":"ref_26","first-page":"1","article-title":"Cloud-Based Experimental Platform for the Space-Ground Integrated Network","volume":"2020","author":"Wang","year":"2020","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Qi, J., Li, Z., and Liu, G. (2015, January 15\u201317). Research on coverage and link of multi-layer Satellite Network based on STK. Proceedings of the 10th International Conference on Communications and Networking in China (ChinaCom), Shanghai, China.","DOI":"10.1109\/CHINACOM.2015.7497975"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"325","DOI":"10.1007\/s42064-018-0026-9","article-title":"A rapid method for validation and visualization of agile Earth-observation satellites scheduling","volume":"2","author":"Yin","year":"2018","journal-title":"Astrodynamics"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1007\/s11134-011-9231-4","article-title":"The on\u2013off network traffic model under intermediate scaling","volume":"69","author":"Dombry","year":"2011","journal-title":"Queueing Syst."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Sharma, D., Kim, D., Yoon, S., Lim, H., Cho, J., and Moore, T. (2018, January 1\u20133). FRVM: Flexible random virtual IP multiplexing in software-defined networks. Proceedings of the 17th IEEE International Conference on Trust, Security And Privacy In Computing And Communications\/12th IEEE International Conference On Big Data Science And Engineering (TrustCom\/BigDataSE), New York, NY, USA.","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00088"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Masumi, K., Han, C., Ban, T., and Takahashi, T. (2021, January 26\u201328). Towards Efficient Labeling of Network Incident Datasets Using Tcpreplay and Snort. Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy, New York, NY, USA.","DOI":"10.1145\/3422337.3450326"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/1\/44\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T07:51:14Z","timestamp":1760169074000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/1\/44"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,12,22]]},"references-count":31,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2022,1]]}},"alternative-id":["s22010044"],"URL":"https:\/\/doi.org\/10.3390\/s22010044","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2021,12,22]]}}}