Based On The Operating System Virtualization Traceability Demo System Design And Implementation

With the development of the Internet technology, the network security has an important problem. Although the legislation on cybercrime has released, network attacks still occurred from time to time. This is mainly due to the non-authentication and stateless nature of the IP network. Under such a condition, if an attacker forges the source IP address, the victim or law enforcement agen-cies can hardly to find and punish the attacker. In order to solve this problem, traceback technology which can helps locate the attacker and stop the attack process draws much attention in the field of network security.The research of the network traceback system requires a large-scale net-work to validate the performance of proposed traceback technologies. It’s prohibitively expensive to build and maintain a real network for this purpose. However, the OS-based virtualization technology provides an opportunity to build an easy-to-maintain emulation of the large-scale network which will saves significant cost. Therefore, the research of the OS-based virtualization trace-back system has great significance for designing and implementing new trace-back technologies.This paper is organized as follows:Firstly, it described the architecture of the OS-based virtualization traceback system and analyzed the main func-tions of its elements. Secondly, it presents several solutions to meet the special requirements of the OS-based virtualization traceback system:(1) the system kernel modules should be recoded for the OS-based virtualization environmen-t; (2) the various virtual environments requires the establishment of a special network technology; (3) running multiple traceback system’s kernel modules in the same kernel also need special treatments. Finally, this paper shows the test result of the traceback system in the OS-based virtualization environment including the traceback false alarm rate, the traceable accuracy and the average time. The results show the effectiveness of the proposed emulation system for traceback.