Research And Implemenation Of Network Attack And Defense Virtual Scene Construction Technology

With the popularization and development of the network,network security incidents are frequent and security technical personnel are scarce.Network security education and training are extremely urgent.The practical training platform related to network security attack and defense is an important way to cultivate the practical ability of technical personnel,among which the virtual scene construction technology of network attack and defense is one of the core functions of the platform.Currently,there are some problems in the construction of network attack and defense virtual scenes,such as single virtual scene and less Web presentation of virtual products.Mainstream x86 architecture platform including host,server using KVM,Xen,VMware virtualization technology,the embedded system network elements including all kinds of equipment such as routers use Dynamips virtualization technology,more than the KVM host virtualization technologies,such as remote Web of Dynamips virtualization and Dynamips with KVM virtual still exist many problems in applying the interchanges.So this article will focus on isomerization virtual application connectivity and virtual application researches on the key technologies such as Web visualization,designs and implements a network attack and defense virtual scene build platform,provide the underlying virtual operation,network virtualization platform,Web visualization,offensive and defensive scene layout,policy configuration,virtual node topology generation,and other functions,will eventually support network attack and defense drills and application scenarios such as teaching practice.This paper mainly carried out the following work:(1)This paper analyzes the research status of network attack and defense platform and scene virtualization technology at home and abroad,analyzes the existing problems in heterogeneous virtual application interconnection and virtual application Web visualization,and then puts forward the research background and significance of network attack and defense virtual scene construction technology.(2)This paper introduces the key technology of network attack and defense virtual scene construction platform.In terms of virtualization,technical characteristics of KVM virtualization,Dynamips routing virtualization and OpenvSwitch network virtualization are introduced,and problems faced by interconnection of heterogeneous virtual applications are analyzed.In terms of Web visualization,WebSocket principle and advantages are introduced,and the feasibility of Web visualization in virtual system is analyzed.In terms of platform architecture,in view of the stability,open source and lightweight of ThinkPHP fr-amework,the support of ThinkPHP5 framework in platform implementation is introduced in detail.(3)This paper focuses on the core technologies of network attack and defense virtual scene construction:heterogeneous virtualization interconnection technology and virtual application Web visualization technology.Virtual applications in a heterogeneous interconnection technology,this paper puts forward a kind of heterogeneous network virtualization scheme based on OpenvSwitch,through OpenvSwitch network virtualization implementation of heterogeneous KVM virtualization with Dynamips virtualization application,the connectivity between the need to implement within OpenvSwitch traffic bridge,protocol translation,condition monitoring,:flow table query,matching flow chart,data flow and function.In terms of virtual application visualization technology,a websocket-based router Web visualization scheme is proposed.By comparing the principle and advantages of noVNC implementation,WebSockify proxy is used to realize the conversion between client WebSocket traffic and server TCP traffic,as well as the Web communication between client and server to realize Web visualization.(4)The network attack and defense virtual scene construction platform is designed and implemented,and the overall design architecture and functional modules of the platform are proposed,including network attack and defense scene virtual module,experiment module,user module,course module,system module and public module.At the same time,I designed the processing flow of core functions and auxiliary functions,designed the database e-r graph and database table,and finally realized the system function of the network attack and defense virtual scene construction platform.(5)Test and verify the network attack and defense virtual scene construction and platform related functions.The experimental results show that the platform can realize the interconnection and interworking between KVM virtualization application and Dynamips virtualization application,as well as the Web visualization function of virtual application.Platform for different browsers also has good compatibility,can quickly realize the construction of network attack and defense scenarios,and has good security.