Design And Implementation Of An IDS Network Security Virtual Laboratory

With the information security being cared by people, most universities have their information security department, and urgently need a Lab for information security. But the Security Devices are combinations of hardware and software, and generally didn't be applied for teaching. The Virtual Laboratory (VL) based on the Internet solved the problem and make it possible that people can acquire knowledge through Internet.In this paper, we firstly survey in detail the theories of Common Intrusion Detection Frames (CIDF) and Intrusion Detection System (IDS). Based on the theories, we propose an network-based (IDS) Virtual Lab Model and then discuss the design and implementation of the virtual IDS laboratory using the model, which can let users manage and re-configure the modules by using Java Bean components technology, which can show them the status of the network security by using chart sheet, and which can test other network-based IDS by using the traffic generated by the packets generator of the system. And also the expansibility of the system can let users submit and verify their own algorithms.Finally, after demonstrating the system, we summarize our work, and discuss how to extend the system both in functionality and content in the future.