基于虚拟机技术的入侵检测系统攻击仿真平台的研究和实现  

The Research and Implementation of Attack Simulation Platform for Testing Intrusion Detection System Based on Virtual Machine Technology

作　　者：王汝传[1] 黄良俊[1] 胡涛[1] 孙知信[1] 

机构地区：[1]南京邮电学院计算机科学与技术系

出　　处：《电子与信息学报》2004年第10期1668-1674,共7页Journal of Electronics & Information Technology

基　　金：国家自然科学基金(60173037和70271050);江苏省自然科学基金(BK2003105);国家高科技项目863(2004AA776032);江苏省计算机信息处理技术重点实验室基金(kjs03061和kjs04)资助课题

摘　　要：攻击仿真平台是入侵检测系统(Intrusion Detectoin System,IDS)测试平台的核心组成部分,该文从攻击测试的角度,提出了一种基于虚拟机技术的IDS攻击仿真平台.首先介绍攻击仿真的测试目标和内容,并提出了攻击仿真系统和仿真平台的设计和实现的详细方案;同时,在此基础上,对该平台的设计和实现的3个关键技术,测试数据的选择、攻击技术的分类研究、攻击测试域及其划分等进行了进一步的分析,最后给出并分析了实验测试结果。Attack simulation plays a key role in testing Intrusion Detection System(IDS). From the viewpoint of attack testing, an attack simulation platform is put forward for testing IDS based on virtual machine technology. First of all, the testing aims and contents of attack simulation are proposed. Then, the design and implementation of the attack simulation platform are presented in detail. Under the platform, that the authors build, three key issues in realization of the platform: the choice of testing datum, the classification of attack technology, and the attack testing zones and their compartmentalization are discussed in detail. Finally, the test results are given.

关 键 词：入侵检测系统 仿真平台 虚拟机 攻击测试 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论] TN918[自动化与计算机技术—计算机科学与技术]