基于SDN的网络安全攻防虚拟仿真实战平台设计  

Design of virtual simulation platform for network security attack and defense based on SDN

作　　者：许林 孟娜 袁静 吴丹 XU Lin;MENG Na;YUAN Jing;WU Dan(th Hospital of PLA,Jinan 250000,China)

机构地区：[1]解放军第960医院,山东济南250000

出　　处：《电子设计工程》2022年第16期139-142,147,共5页Electronic Design Engineering

基　　金：青年科学基金项目(61601264)。

摘　　要：针对当前网络安全攻防虚拟仿真实验教学中切换攻防模式难度大、网络拓扑灵活性差、难以与其他开源产品融合等问题,基于软件定义网络,提出安全攻防虚拟仿真实战平台。阐述了平台的网络拓扑、关键技术及设计构架。基于虚拟化及SDN(软件定义网络),通过Open Stack开源云平台对SDN网络拓扑及虚拟网络部件进行构建,实现了网络隔离的有效实施。由攻防实战环境的设置可知,该平台网络拓扑灵活性高,攻防模式具有多样化,且可扩展性较好,有效降低了建设成本,提高了网络攻防虚拟仿真实战教学水平。In view of the difficulties of switching attack and defense mode,low flexibility of network topology,and difficult integration with other open source products in the current virtual simulation experiment teaching of network security attack and defense,this paper proposes a virtual simulation experiment platform for security attack and defense based on software defined network. The network topology,key technology and design framework of the platform are described. Based on virtualization and SDN,the network topology and virtual network components of SDN are constructed through Open Stack open source cloud platform,which realizes the effective implementation of network isolation. According to the setting of attack and defense actual combat environment,the platform has high flexibility of network topology,diversified attack and defense modes,and good scalability,which effectively reduces the construction cost and improves the actual combat teaching level of network attack and defense virtual simulation.

关 键 词：网络 攻防 实战教学 OPENSTACK 虚拟仿真 

分 类 号：TN806[电子电信—信息与通信工程]