Research And Application Of The Core System Of Actual Combat In The Network Offensive And Defensive Range

With the rapid development of Internet,a lot of information security problems are emerging,and more and more attentions are paid to network security.However,there are many problems need to be solved in network security,such as lack of network attack and defensive experimental platform in controllable environment.In this case,network range,which is a platform that used to network attack and defense,came into being.At present,there are some network ranges all over the world,but most of them are general-purpose network ranges and cannot be perfectly applied to specific situation,especially in power grid‘s information systems.With the rapid development of power information and smart grid,information systems have become increasingly large,and the number of network attacks has increased.Constructing the network attack and defense range core system for power grid,and penetration test on the network range,attacking the target with hacker's technique,exploring the vulnerabilities and bugs of the system and fixing them as soon as possible to guarantee the security of network information.The network attack and defense range combat core system was mainly studied in this paper.As well,we will design and implement a network range that is used in the power grid‘s information system.Specifically,the main context of this paper is as follows:(1)Investigated the network information security risk and informational security vulnerability,studied information security technology and network attack and defense principle,and mastered the key technology of network range.(2)Proposed a network attack and defense game optimization model,and then described the algorithm implementation of the model.Through constructing the network attack and defense game optimization model,and given the detailed algorithm implementation of the model,which is used to study the selection of optimal network defense strategy.In the research,constructing the dynamic equations of attack and defense game to analyze the equilibrium state of the game model.In the experiment,through observing the evolution trend of attack and defense game,the evolutionary stable state of attack and defense game was obtained finally,and the selection of the optimal network defense strategy is achieved.(3)Using honeypot technology and combining China Southern Power Grid's private cloud technology for environmental construction and target development to simulate the real application circumstances of the power grid‘s information system.In addition,designed and implemented a network attack and defense combat core system for the power grid‘s information system.In the range design,it focuses on the design of honeypot environmental support module,attack module,defense module and evaluation module.Among of them,Attack module constructed the vulnerability database and analyzed the characteristic of network attack,defensive module adopted the network attack and defense game optimization model algorithm,and evaluation module adopted the subjective assignment method and the entropy weight method to better assessment the attack and defense effect.(4)Functional test and application of network range.The network range can simulate the typical network environment of the power grid‘s information system and realize the functions of individual combat,red-blue combat,exam management,and scene management.Finally,a model for defending against DDoS attacks based on network range trapping technology is proposed,which is very useful for the analysis of the characteristics of DDoS attack and then deploy defense measures.