基于虚拟化的轻量级背景流量节点生成及部署算法研究  

Study of an algorithm for generation and deployment of background traffic nodes based on virtualization

作　　者：解维崇 李正民[2] 董开坤[1] 沈英宏 

机构地区：[1]哈尔滨工业大学计算机科学与技术学院,哈尔滨150001 [2]国家计算机网络应急技术处理协调中心,北京100029

出　　处：《高技术通讯》2016年第12期969-977,共9页Chinese High Technology Letters

基　　金：国家科技支撑计划(2012BAH45B01);国家自然科学基金(61100189;61370215;61370211);国家信息安全计划(2014A0852015A072)资助项目

摘　　要：进行了网络攻防分析,针对传统的背景流量模拟技术在生成及部署方面存在背景流量大小}限、背景流量真实性不足、背景流量生成工具部署的数量和位置}限的问题,提出了一种基于虚拟化的轻量级背景流量节点生成及部署算法,该算法是一种基于资源量的目标流量映射、基于最短路由的背景流量应用添加、基于最少通信代价的节点映射的三阶段算法,解决了背景流量节点在网络攻防实验中大规模快速生成及灵活部署的问题。实验结果表明,使用轻量级背景流量节点,生成的背景流量满足网络自相似性,资源消耗小、启动速度快,并且可根据实际网络攻防实验的需求进行动态、灵活、快速的大规模部署。The analysis of network attack and defense was conducted, and aiming at the traditional background traffic simulation technology＇ s problems in generation and deployment of traffic nodes such as size limitation of back- ground traffic, authenticity limitation of background traffic, and number and position limitations of the tools for background traffic generation and deployment, an algorithm for generation and deployment of lightweight back- ground traffic nodes based on virtualization was proposed. This is a three-phase algorithm that consists of the target traffic mapping based on resource amount, the adding of background traffic application based on the shortest route, and the node mapping based on the least communication cost, aiming to solve the problems of massive, rapid gener- ation of background traffic nodes and flexible deployment of them in network attack and defense experiments. The experimental results show that using the proposed lightweight background traffic nodes to generate the background traffic can satisfy the self-similarity of networks, the small consumption of resource, the fast starting speed, and the massive, flexible and quick deployment according to the actual network attack and defense experiment.

关 键 词：背景流量 DOCKER 自相似 动态部署 虚拟映射 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP301.6[自动化与计算机技术—计算机科学与技术]