虚拟化工控网络靶场的设计与自动化部署  

Design and automatic deployment of virtual industrial control network range

作　　者：陈吉龙 翟健宏[1] CHEN Jilong;ZHAI Jianhong(College of computer science and technology,Harbin Institute of Technology,Harbin 15000,China)

机构地区：[1]哈尔滨工业大学计算机科学与技术学院,哈尔滨150000

出　　处：《智能计算机与应用》2020年第5期56-62,66,共8页Intelligent Computer and Applications

摘　　要：21世纪互联网的高速发展带动了工业信息化的革新,越来越多的工业控制系统由原先的封闭网络转入开放互联网络,在资源利用率和工作效率不断提升的同时,工业控制系统的脆弱性也逐渐暴露在公众视角中。工控安全研究起步晚,现有能应对网络化、信息化工控安全问题的人才储备不足。同时,由于工业控制系统的复杂性、专业性和封闭性,市场上可用于工控安全研究及测试的软硬件平台不多,且都普遍存在成本投入大、操作复杂、灵活性不高等问题。本文给出了一种基于虚拟化技术的工控网络靶场解决方案,利用OpenStack和Snort等系统,以低投入、低消耗的代价实现了工业控制场景的虚拟化仿真,使工控安全教育研究能在虚拟化平台上开展。The rapid development of the Internet in the 21st century has led to the innovation of industrial informatization.More and more industrial control systems have been transferred from the original closed network to the open Internet.While the resource utilization rate and work efficiency have been continuously improved,the vulnerability of industrial control systems has been gradually exposed in the public perspective.The study of industrial control safety started late,and there are insufficient talents to deal with the problem of industrial control safety under network and informatization.At the same time,due to the complexity,professionalism and closure of the industrial control system,there are not many software and hardware platforms available for industrial control safety research and testing in the market,and there are widespread problems such as large cost input,complex operation and low flexibility.This paper presents an industrial control network range solution based on virtualization technology.OpenStack and Snort systems are used to realize the virtual simulation of industrial control scenarios at a low cost of investment and consumption,so that the research on industrial control safety education can be carried out on the virtualization platform.

关 键 词：工控安全 网络靶场 OPENSTACK SNORT 

分 类 号：TP311.52[自动化与计算机技术—计算机软件与理论]