Simulating Malware with MAlSim
In this paper, the authors describe MAlSim - Mobile Agent Malware Simulator - a mobile agent framework developed to address one of the most important problems related to the simulation of attacks against information systems, i.e. the lack of adequate tools for reproducing behavior of malicious software (malware). The framework can be deployed over the network of an arbitrary information system and it aims at simulating behavior of each instance of malware independently. MAlSim Toolkit provides multiple classes of agents and diverse behavioral and migration/replication patterns (which, taken together, form malware templates), to be used for implementation of various types of malware (viruses, worms, malicious mobile code).