Research And Implementation Of Multi-granularity Terminal Configuration System In Network Testbed

With the rapid development of the Internet,the issue of network security has been attracting the public attentions.Network security incidents happened frequently in recent years have induced to more severe issues of the network security.The approaches to effectively preventing and solving network security incidents include the development and testing of security tools,the research and analysis of virus Trojans,and the restoration and recurrence of attack events.However,from design to test,these technologies have to be strictly limited to a secure range to prevent it from causing huge harms to the Internet or losses to the public.As a controlled test platform,the network testbed can deploy and test the technologies mentioned above in an environment that simulates real-world conditions.Common network testbeds are divided into physical testbed,virtual testbed and network emulation testbed.The physical testbed is realized by physical simulation technology,which guarantees the authenticity of the network testbed,but reduces the complexity of the network testbed,and has higher requirements for cost;the virtual testbed and network emulation testbed are realized by virtualization technology or network emulation technology,which improves the complexity at low cost,but also greatly reduces the authenticity.The new network testbed construction scheme designed in this thesis realizes the integration of physical testbed and virtual testbed.It combines single-granularity physical testbed,virtual testbed and network emulation testbed,and can customize the proportion of different types of testbed.It can build a more real multi-granularity network testbed with cost control,which greatly alleviates the contradiction between the complexity of network testbed and the authenticity of emulation under cost control.The construction of this new network testbed presents new requirements and challenges for the existing terminal deployment technology.According to the advantages of various deployment technologies,this thesis combines them and adopts more efficient deployment methods for different types of terminal nodes.While deploying the system automatically,it realizes the deployment of customized software and the configuration of system environment,supports the basic functions of multi-granularity network testbed,and meets the diversified requirements of testbed scenarios.The main work of this thesis is to set up a new network testbed,design a multi-granular terminal system solution,in which it realizes the automatic and customized deployment of multi-granularity terminal system nodes,including automatic installation of customized operating system to terminal nodes,configuration of its system environment and installation of application softwares,vulnerabilities,security tools and so on.This thesis proposes a design scheme for multi-granularity terminal customization system of network testbed;realizes the automatic and customized deployment of terminal nodes by optimizing hard disk image copy and restore technology and customized remote network installation technology;utilizes virtualization technology and network emulation technology to support the functions of testbed virtualnode and mathnode;and designs the Trojan scan scenario on testbed,and implement the scenario by using the terminal deployment technique in multi-granularity network testbed.