基于LibNIDS的网络安全实验设计与实现  

Design and implementation of network security experiment for LibNIDS

作　　者：孙亮 刘文杰[1] SUN Liang;LIU Wenjie(Software School of Technology,Dalian University of Technology,Dalian 116600,China)

机构地区：[1]大连理工大学软件学院,辽宁大连116600

出　　处：《实验室科学》2020年第2期93-96,共4页Laboratory Science

基　　金：国家自然科学基金项目(项目编号:61175062)。

摘　　要：高校计算机信息安全实验课程,使用LibNIDS平台搭建基础实验平台,已经成为通用做法。课程体系建设过程中,防火墙攻防实验是重点内容。搭建稳定、快速、高效便捷的实验平台,设计完整的实验过程,成为网络安全实验课程研究的重点。实验通过Guardian和SnortSam组件,设计snort与iptables联动、Web服务器控制访问、阻塞ICMP洪水等的操作过程。解决实验教学手段和实验教学体系完整化的关键问题。同时针对现有网络安全教学体系,设计符合现有教学要求的实验过程,并给出了相应的解决方案和具体教学方法。College computer information security experiment course,the use of LibNIDS platform building basic experiment platform,has become a common practice.In the process of the curriculum system construction,the firewall defense experiment is the key content.Build steady and fast efficient experimental platform,the design of the complete experimental process,become a focus in the study of network security experiment course experiment.By the Guardian and SnortSam components,design the snort and iptables linkage control access to the Web server blocking ICMP flooding operation process,etc.At the same time,according to the existing network security teaching system,the experimental process is designed to meet the existing teaching requirements,and the corresponding solutions and specific teaching methods are given.

关 键 词：NIDS 攻防实验 防火墙 网络安全实验 

分 类 号：G482[文化科学—教育学]