Design And Research On Cyber Range Construction

With the increasing dependence on the Internet,cyberspace has become an important strategic space for all countries to compete for.As a key infrastructure for cyberspace confrontation,information security research and personnel training,cyber range has drawn wide attention.Cybersecurity research usually deals with a wide range of system and environment using many different methods and sometimes causes irreversible destruction on systems.It is important to design and construct a flexible and expandable cyber range for cybersecurity research.Based on the detailed demand analysis of the cyber range and the exhaustive design of each module,this paper gives a comprehensive design for cyber range system.To deal with the complex deployment of network environment traditional cyber experiment,the concept of network template is put forward.To manage a large number of virtual machines and virtual networks in the cyber range system,this paper proposes a practical IaaS-cloud-based solution to manage the massive virtual resources in the bottom of system.Through comprehensive comparisons of several popular virtualization technologies,the technical scheme of constructing a cyber range system is clarified.Finally,through the combination of the global VXLAN and local VLAN,the isolation of the overlay network in the cyber range is ensured.Besides,OVS and Linux namespace are used to connect the virtual network,and iptables is used to realize the traffic control.With all these techniques,we manage to construct a cyber range which supports heterogeneous networks and heterogeneous hosts,and can easily design and deploy virtual environment for experiments.What's more,over a dozen of network scenarios are designed and released in this cyber range system,proving the flexibility and expandability of the cyber range system.In general,our cyber range system provides a good environment for the research on information security and personnel training.