基于开源架构的虚拟网络安全实验平台  

Virtual network security experimental platform based on open source architecture

作　　者：鲁先志[1] 胡海波[2] 

机构地区：[1]重庆电子工程职业学院计算机学院,重庆401331 [2]重庆大学软件学院,重庆400044

出　　处：《实验技术与管理》2015年第7期120-123,155,共5页Experimental Technology and Management

基　　金：国家自然科学基金项目(61103114);重庆市教委科学技术研究项目(KJ132207)

摘　　要：提出了基于开源架构的虚拟网络安全实验平台的解决方案,利用KVM技术、软件定义网络技术以及基于ISCSI协议的网络存储技术等实现了该方案,并给出了2个常用的实验模板。实验表明:使用者利用该网络安全实验平台可构建各种网络渗透实验测试环境及虚拟企业网络数据存储环境。与基于VMware虚拟化技术解决方案相比,该网络安全实验平台具有网络访问控制灵活、无需购买商业授权以及硬件资源占用少等优点。A construction approach on virtual platform network for security experiment based upon open source architecture is proposed.The proposed scheme is implemented with KVM（Kernel-based Virtual Machine）,SDN（Software-Define Networking）,and based on ISCSI protocol of network storage technology as well.Two common experimental templates are presented to facilitate the usage of the proposed platform.By using the templates,users can perform variable experiments on the proposed platform,such as network exploitation test and virtual enterprise network data storage environment.Compared with VMware-based virtualization technology,the proposed mechanism manifest is beneficial to laboratory of network security with flexible network access control,less hardware costs,and without software license fees as well.

关 键 词：网络安全 实验教学 KVM 软件定义网络 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]