《電子技術(shù)應(yīng)用》
您所在的位置:首頁(yè) > 通信與網(wǎng)絡(luò) > 設(shè)計(jì)應(yīng)用 > 基于虛擬化的網(wǎng)絡(luò)空間綜合靶場(chǎng)建設(shè)研究
基于虛擬化的網(wǎng)絡(luò)空間綜合靶場(chǎng)建設(shè)研究
網(wǎng)絡(luò)安全與數(shù)據(jù)治理
周云1,劉克斌2,蘇輝1,林飛2,鐘杰2
1.31309部隊(duì),;2.中電長(zhǎng)城網(wǎng)際安全技術(shù)研究院(北京)有限公司
摘要: 隨著網(wǎng)絡(luò)空間對(duì)抗的復(fù)雜化,網(wǎng)絡(luò)靶場(chǎng)已成為奪取國(guó)家網(wǎng)絡(luò)空間安全主導(dǎo)權(quán)的關(guān)鍵領(lǐng)域,,同時(shí)也是確保國(guó)家網(wǎng)絡(luò)安全的戰(zhàn)略新高地,。網(wǎng)絡(luò)綜合靶場(chǎng)是開(kāi)展防護(hù)訓(xùn)練、對(duì)抗競(jìng)賽,、攻防演練,、技術(shù)研究等網(wǎng)絡(luò)安防實(shí)戰(zhàn)化工作的重要基礎(chǔ)設(shè)施。研究了基于虛擬化技術(shù)的網(wǎng)絡(luò)空間綜合靶場(chǎng)建設(shè)問(wèn)題,,根據(jù)網(wǎng)絡(luò)空間安全防護(hù)需求,,對(duì)網(wǎng)絡(luò)綜合靶場(chǎng)能力建設(shè),、架構(gòu)設(shè)計(jì),、功能組成、關(guān)鍵技術(shù)和應(yīng)用場(chǎng)景等方面進(jìn)行了研究,,為網(wǎng)絡(luò)綜合靶場(chǎng)的建設(shè)提供了有益借鑒,。
中圖分類(lèi)號(hào):TP393;TP309文獻(xiàn)標(biāo)識(shí)碼:ADOI:10.19358/j.issn.2097-1788.2024.08.001
引用格式:周云,劉克斌,蘇輝,等.基于虛擬化的網(wǎng)絡(luò)空間綜合靶場(chǎng)建設(shè)研究[J].網(wǎng)絡(luò)安全與數(shù)據(jù)治理,2024,,43(8):1-8.
Research on the construction of integrated cyber range based on virtualization
Zhou Yun1,,Liu Kebin2,,Su Hui1,Lin Fei2,,Zhong Jie2
1.Unit 31309 of PLA;2.China Electronics Greatwall Internet Security Technology Research Institute (Beijing) Co.,Ltd.
Abstract: With the complication of cyberspace confrontation, the cyber range has become a key field to seize the dominance of national cyberspace security, and it is also a new strategic high ground for ensuring national cyber security. The integrated cyber range is an important infrastructure for the implementation of defensive training, confrontation competitions, offensive and defensive drills, technical research and other practical work of cyberspace security. According to the requirements of cyberspace security protection, this paper studied the integrated cyber range construction based on virtualization technology, such as capacity building, architecture design, functional composition, key technologies and application scenarios, and provided a useful reference for the construction of the integrated cyber range.
Key words : integrated cyber range; virtualization; cyberspace; network security protection

引言

目前,,網(wǎng)絡(luò)空間對(duì)抗已由單純的互聯(lián)網(wǎng)發(fā)展到了泛在網(wǎng)絡(luò)空間,攻擊方式也更加復(fù)雜,。隨著網(wǎng)絡(luò)空間對(duì)抗的日趨復(fù)雜化,,為了在這個(gè)新的作戰(zhàn)空間占據(jù)主動(dòng),網(wǎng)絡(luò)攻防的仿真模擬已成為各科技強(qiáng)國(guó)提升網(wǎng)絡(luò)空間安全能力的重要方式[1],。

網(wǎng)絡(luò)攻防訓(xùn)練場(chǎng)的發(fā)展經(jīng)歷了從針對(duì)木馬類(lèi)單一性攻擊武器而建立的實(shí)物高逼真型標(biāo)靶,,到構(gòu)建小型虛擬化互聯(lián)網(wǎng)靶場(chǎng),最終發(fā)展為支撐泛在網(wǎng)的大型虛實(shí)結(jié)合國(guó)家網(wǎng)絡(luò)靶場(chǎng)[2],,并逐步成為支撐網(wǎng)絡(luò)空間安全驗(yàn)證,、網(wǎng)絡(luò)防護(hù)訓(xùn)練、攻防對(duì)抗演練和安全新技術(shù)評(píng)測(cè)的重要基礎(chǔ)設(shè)施 [3],。未來(lái)網(wǎng)絡(luò)靶場(chǎng)將向著大規(guī)模網(wǎng)絡(luò)的仿真與感知[4],、場(chǎng)景化網(wǎng)絡(luò)行為的逼真模擬[5]、多類(lèi)靶場(chǎng)信息的低損耗采集[6],、多層次動(dòng)態(tài)隔離的管理控制[7]等方向發(fā)展,,如美國(guó)國(guó)家靶場(chǎng)可進(jìn)行無(wú)線發(fā)射設(shè)備測(cè)試、北大西洋公約組織的網(wǎng)絡(luò)靶場(chǎng)支持工控網(wǎng)的攻防測(cè)試[8],。網(wǎng)絡(luò)靶場(chǎng)不僅是奪取國(guó)家網(wǎng)絡(luò)空間安全主導(dǎo)權(quán)的關(guān)鍵領(lǐng)域,,也是確保國(guó)家網(wǎng)絡(luò)安全的戰(zhàn)略新高地。

本文研究了網(wǎng)絡(luò)空間綜合靶場(chǎng)建設(shè)問(wèn)題,,通過(guò)對(duì)國(guó)內(nèi)外網(wǎng)絡(luò)靶場(chǎng)的研究成果進(jìn)行跟蹤分析,,結(jié)合網(wǎng)絡(luò)空間安全防護(hù)現(xiàn)實(shí)需求,對(duì)建設(shè)網(wǎng)絡(luò)綜合靶場(chǎng)的思路和技術(shù)方法進(jìn)行了初步探討和研究,。該研究對(duì)網(wǎng)絡(luò)靶場(chǎng)的深入應(yīng)用具有重要意義,。


本文詳細(xì)內(nèi)容請(qǐng)下載:

http://forexkbc.com/resource/share/2000006098


作者信息:

周云1,劉克斌2,蘇輝1,林飛2,鐘杰2

(1.31309部隊(duì),四川成都610011,;2.中電長(zhǎng)城網(wǎng)際安全技術(shù)研究院(北京)有限公司,,北京100097)


Magazine.Subscription.jpg

此內(nèi)容為AET網(wǎng)站原創(chuàng),未經(jīng)授權(quán)禁止轉(zhuǎn)載,。