Research And Implementation Of Traffic Service System For Network Security Experiment Platform

As a special network experiment platform,network security experiment platform is built to provide network experimental environment for the research,test,verification and evaluation of network security techniques and systems.With the help of experimental assistant tools provided by the platform,users can more easily observe and control the experiments,thus improving the efficiency and quality of the experiments.At present,the researches of network security experiment platform are mainly focused on system architecture and key techniques.There are few researches about specific experimental assistant tools,including traffic management.In order to build assistant tools of network security experiment platform and improve its availability,we design and implement a traffic service system in this paper,which provides various traffic generation function,flexible traffic capture function and detailed traffic characteristics analysis function.The specific work of this paper is as follows:1)A traffic service system is designed after doing research on the architecture of network security experiment platform and analyzing the traffic management needs of users when they are using network security experiment platform.The system is divided into modules according to functions,and the modules are independent of each other,making the system easy to expand and maintain.2)An extendable integration framework of traffic generation tools is proposed.It defines a process to deal with users' traffic generation requests,which enables the system to run multiple traffic generation tools simultaneously.3)In this paper,a traffic generation strategy considering virtual machines' load is presented.First,the resource usage data of virtual machines is collected.Then,virtual machines with low load calculated using CPU utilization,memory utilization,and bandwidth utilization are selected to generate traffic.4)This paper designs a traffic generation control method using agents.First,agents in virtual machines are deployed.Then communication with the virtual machines using shared directories is established.Finally the agents are used to control the traffic generation tools in the virtual machines.5)The traffic capture and traffic characteristics analysis techniques are studied.Then,the traffic capture function and traffic characteristics analysis function of the system are designed and implemented.6)The test network is built on the network security experiment platform,and the system is tested to verify the effectiveness of the system.