基于虚拟靶场的渗透测试实践教学机制探索  

Exploration on Practical Teaching Mechanism of Penetration Testing Based on Virtual Shooting Range

作　　者：玄世昌[1] 王巍[1] 苘大鹏[1] 吕继光 杨武 XUAN Shichang;WANG Wei;QING Dapeng

机构地区：[1]哈尔滨工程大学计算机科学与技术学院,哈尔滨150001

出　　处：《高教学刊》2024年第2期29-32,共4页Journal of Higher Education

基　　金：2021年度黑龙江省高等教育教学改革项目“‘学-赛-战’融合的网络攻防对抗实践教学新模式与实践”(SJGY20210226);2021年度哈尔滨工程大学本科生教学改革项目“《网络安全法》新形势下渗透测试实践教学新模式与实践”(无编号)。

摘　　要：渗透测试实践教学是为信息安全相关专业学生开设的少数攻击类课程,是必不可少的教学环节。随着《中华人民共和国网络安全法》等法律法规的不断完善,渗透测试教学的实践模式需要不断创新。针对实践教学中资源和时间方面的难题,设计并实现基于OpenStack的虚拟靶场系统,从教学过程、教学方法 、考核方式等角度分别提出开放式线上线下混合教学、引导式基础实验过程、赛学融合的考核方式等具体改革方法,探索渗透测试实践教学的新机制。Penetration testing practical teaching is one of the few offensive courses offered to students majoring in information security and is an essential part of their education.With the continuous improvement of laws and regulations such as the"The Cybersecurity Law of the People's Republic of China",the practical teaching mode of penetration testing needs constant innovation.To address the challenges of resources and time in practical teaching,we have designed and implemented a virtual range system based on OpenStack.We have proposed specific reform methods from the perspectives of teaching process,teaching methods,and assessment methods.These methods encompass open online and offline blended teaching,guided basic experimental processes,integration of competition and learning,and various other reform methods.Through these specific reforms,we have explored new mechanisms in penetration testing practical teaching.

关 键 词：渗透测试 教学改革 实践教学 网络靶场 赛学融合 

分 类 号：G642[文化科学—高等教育学]