Research On Key Technologies For Constructing High Fidelity Large Scale Target Networks For Cyber Range

With the improvement of information technology,network security threats have shown a trend of diversification,complexity,and scale.Building large-scale network scenarios on a cyber range helps to create a more realistic network environment that can be applied to various network scenarios.The scale of real network systems is huge and their structures are very complex.It requires a lot of time and effort to infer and construct a complete network system,and the accuracy and comprehensiveness of its results cannot be guaranteed.Based on the above reasons,this article proposes key technologies for topology inference and routing system construction of the target network(i.e.formal description of the target network construction)for the construction of the range network,and then achieve a large-scale,high fidelity,automated target network generation system for the target platform.The main contributions of this article are as follows:This article proposes an on-demand planning generation method for the target network to address the topology construction problem.This article constructs a network topology template based on public datasets,extracts key network topology structures based on router node centrality and path connectivity,and parameterizes reverse construction based on this topology structure to achieve large-scale realistic network topology construction.This article proposes a method for constructing a routing system for the problem of routing generation in the target network.This article is based on BGP(Border Gateway Protocol)routing data obtained from public datasets.Based on actual traffic,existing AS(Autonomous System)inference relationships are fine-tuned to make the inferred AS relationships as close to reality as possible.Based on this,BGP protocol is configured for inter domain routing in network systems and OSPF(Open Shortest Path First)protocol is configured for intra domain routing.Based on the above methods,this article constructs a target network construction system for generating network systems in the cyber range,and utilizes this system to achieve largescale DNS scene construction on demand.In this system,the deployment of network topology and routing systems,as well as the configuration of various DNS servers and clients,can be carried out according to the user’s requirements for network scale.