网络空间内生安全试验场管理技术

doi:10.11959/j.issn.1000-0801.2021048

Abstract

Abstract:

The cyber range has been widely recognized as an effective way to study the technologies of network attack/defense and the vulnerability of network architecture.The endogenous safety and security test site that receives high attention recently is a type of cyber range for cyber space endogenous safety and security technologies.Based on the new situation of cyberspace with 5G development, a test site management technology for virtual-real network settings was proposed, and a test site management architecture based on the endogenously secured software defined network controller was designed.A design of the endogenously secured network control system was also proposed, which used a middle layer forwarding agent to achieve data isolation and supported multiple heterogeneous open-source controllers.Finally, a test site scenario reconfiguration and resource orchestration method was proposed based on a test site networking scheme.

Key words: cyberspace, endogenous safety and security, cyber range, software defined network

CLC Number:

TP393

Hongyi ZHU, Xiaoyuan LU, Yi LI. Management technologies of cyberspace endogenous safety and security test site[J]. Telecommunications Science, 2021, 37(3): 66-74.

Figures/Tables 5

References 20

[1]	XU H , CHEN X , ZHOU J M ,et al. Research on basic problems of cognitive network intrusion prevention[C]// Proceedings of 2013 Ninth International Conference on Computational Intelligence and Security. Piscataway:IEEE Press, 2013: 514-517.
[2]	CHUNG C J , KHATKAR P , XING T Y ,et al. NICE:network intrusion detection and countermeasure selection in virtual network systems[J]. IEEE transactions on dependable and secure computing, 2013,10(4): 198-211.
[3]	邬江兴 . 网络空间拟态防御研究[J]. 信息安全学报, 2016,1(4): 1-10.
	WU J X . Research on cyber mimic defense[J]. Cyber Security, 2016,1(4): 1-10.
[4]	邬江兴 . 拟态计算与拟态安全防御的原意和愿景[J]. 电信科学, 2014,30(7): 1-7.
	WU J X . Meaning and vision of mimic computing andmimic security defense[J]. Telecommications Science, 2014,30(7): 1-7.
[5]	仝青, 张铮, 张为华 ,等. 拟态防御Web服务器设计与实现[J]. 软件学报, 2017(4): 883-897.
	TONG Q , ZHANG Z , ZHANG W H ,et al. Design and implementation of mimic defense Web server[J]. Journal of Software, 2017(4): 883-897.
[6]	朱泓艺, 陆肖元, 李毅 . 基于拟态防御原理的分布式多接入边缘计算研究[J]. 物联网学报, 2019(10): 80-87.
	ZHU H Y , LU X Y , LI Y . Distributed multi-access edge computing based on mimic defense theory[J]. Chinese Journal on Interner of Things, 2019(10): 80-87.
[7]	方滨兴, 贾焰, 李爱平 ,等. 网络空间靶场技术研究[J]. 信息安全学报, 2016,1(3): 1-9.
	FANG B X , JIA Y , LI A P ,et al. Cyber ranges:state-of-the-art and research challenges[J]. Cyber Security, 2016,1(3): 1-9.
[8]	刘正军, 徐锐, 李春林 ,等. 面向先进防御技术的网络安全试验场构建方法[J]. 通信技术, 2020,53(2): 450-455.
	LIU Z J , XU R , LI C L ,et al. Construction method of network security experimental platform foradvanced defense technology[J]. Communication Technology, 2020,53(2): 450-455.
[9]	FERGUSON B , TALL A , OLSEN D . National cyber range overview[C]// Proceedings 2014 IEEE Military Communications Conference. Piscataway:IEEE Press, 2014: 123-128.
[10]	URISA V E , STOUT W M S , VANan L B ,et al. Cyber range infrastructure limitations and needs of tomorrow:a position paper[C]// Proceedings 2018 International Carnahan Conference on Security Technology (ICCST). Piscataway:IEEE Press, 2018: 1-5.
[11]	PETESON L , WROCLAWSKI J . Overview of the GENI architecture[J]. GENI Design Document, 2007(2): 06-11.
[12]	PETERSONE L , MUIR S , ROSCOE T ,et al. Planetlab architecture:an overview[J]. PlanetLab Consortium May, 2006,1(15): 1-4.
[13]	BENZEL T , BRADEN R , KIM D ,et al. Experience with deter:a testbed for security research[C]// Proceedings of 2nd International Conference on Testbeds and Research Infrastructures for the Development of Networks and Communities. Piscataway:IEEE Press, 2006:10.
[14]	SUNE M , BERGESIO L , WOSENER H ,et al. Design and implementation of the OFELIA FP7 facility:The European OpenFlow testbed[J]. Computer Networks, 2014,61: 132-150.
[15]	WINTER H , . System security assessment using a cyber range[C]// Proceedings of IET International Conference on System Safety.[S.l.:s.n.], 2013.
[16]	SCHWERDEL D , REUTHER B , ZINNER T ,et al. Future internet research and experimentation:the G-Lab approach[J]. Computer Networks, 2014(61): 102-117.
[17]	MULLER P , SCHWERDEL D . A novel approach towards sustainable testbeds:ToMaTo on cloudLab[J]. PIK-Praxis der Informationsverarbeitung und Kommunikation, 2017,39(3-4): 87-102.
[18]	MIYAJI T . X-ray-Infrared relation of AGNs and search for highly obscured accretion in the AKARI NEP Field[J]. Proceedings of the International Astronomical Union, 2019,15(S341): 172-176.
[19]	BAIK K H , SUK Y K . A Study on the ubiquitous industryz's effects on Korean economy using interindustry analysis[J]. Journal of the Korea Academia-Industrial Cooperation Society, 2006,7(3): 494-505.
[20]	丁绍虎, 李军飞, 季新生 . 基于拟态防御的SDN控制层安全机制研究[J]. 信息安全学报, 2018,4(4): 84-93.
	DING S H , LI J F , JI X S . Research on SDN control layer security based onmimic defense[J]. Cyber Security, 2018,4(4): 84-93.

Metrics

Recommended 0

No Suggested Reading articles found!

区域	名称	机构	国家	启动时间	主要任务
北美	National Cyber Range （NCR）^[9-10]	DARPA	美国	2008年	网络攻击防御技术与武器的有效性评估、网络攻防人员培训、网络攻防演练等
	GENI^[11]	NSF	美国	2005年	研究网络核心技术如交换、寻址、网络管理等，提高网络性能，研究新的网络体系结构等
	PlanetLab^[12]	休斯顿大学	美国	2003年	研究资源虚拟化应用和分布式覆盖网络，构建面向全球访问的虚拟化覆盖网试验
	DETERlab^[13]	NSF、DHS、DARPA	美国	2003年	研究下一代高级网络安全技术，构建一个通用的网络安全实验平台
	CASElab^[8]	维多利亚大学	加拿大	2010年	在完全可重复的实验条件下研究真实世界大规模网络系统的行为建模，支持对互联网的新技术/武器的鉴定和评估
欧洲	FP7^[14]	欧盟成员国和相关国家	欧盟	2007年 2013年	研究信息通信技术，包括数字图书馆与资源、数字存储、网络保存、信息检索及运用等多个主题
	FCR^[15]	Northrop Grumman	英国	2010年	研究大型复杂网络的模拟，在安全可控的试验环境进行基础设施生存能力和可靠性方面的网络试验及评估
	G-LAB^[16-17]	BNBF	德国	2008年	研究未来网络技术，主要针对新型网络技术与新型网络应用需求之间的交互与配合
日韩	AKARI^[18]	JAXA	日本	2006年	主要面向小型机构，提供研究下一代网络架构的试验环境
	U-Korea^[19]	韩国政府	韩国	2004年	主要研究无线传感网络

控制器名称启动时间/s	内存占用/KB	代码量/行	主要编写语言
ODL180	976 004	111 737	Java
ONOS 55	461 132	791	Go
Ryu7	45 712	1451	Python

Management technologies of cyberspace endogenous safety and security test site

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 5

References 20

Related Articles 15

Metrics

Recommended 0

[1]	Xinxin TANG, Xuewen ZENG, Zhiyuan LING, Lei SONG. Overview of programmable data plane technology [J]. Telecommunications Science, 2023, 39(4): 1-16.
[2]	Bin ZHUGE, Linchao WANG, Yang SONG, Yu SHAO, Ligang DONG, Xian JIANG. Routing planning and handoff based on LSTM traffic prediction [J]. Telecommunications Science, 2022, 38(8): 86-100.
[3]	Shuo YUAN, Yijing REN, Zeyu WANG, Yaohua SUN, Mugen PENG. Software defined intelligent satellite-terrestrial integrated wireless network [J]. Telecommunications Science, 2021, 37(6): 66-77.
[4]	Fan ZHANG, Guangwei XIE, Wei GUO, Hongchao HU, Ruyun ZHANG, Wenyan LIU. Key technologies and implementation methods of endogenous safety and security cloud data center based on mimic architecture [J]. Telecommunications Science, 2021, 37(3): 39-48.
[5]	Yufeng LI, Chenhong CAO, Jiangtao LI, Peng WANG. An endogenous safety and security technical framework inspired by biological immune system [J]. Telecommunications Science, 2021, 37(3): 49-56.
[6]	Ruyun ZHANG, Heyuan LI, Shunbin LI. Mimic security scheduling algorithm for industrial control under limited heterogeneous resource constraints [J]. Telecommunications Science, 2021, 37(3): 57-65.
[7]	Xuliang WANG, Shuo QUAN, Zengyi LIU, Jun ZHANG. Research on architecture of novel programmable networks for 6G [J]. Telecommunications Science, 2021, 37(12): 84-92.
[8]	Qian HU, Guoyong ZHAO, Xiaoli HUO, Junjie LI, Ruiquan JING, Fei YAN, Xiaofeng WU. Application and research of SDN-based management and control technology for optical transport grey-box devices [J]. Telecommunications Science, 2021, 37(12): 93-100.
[9]	Tianjiao CHEN,Jiang LIU,Tao HUANG. Application of artificial intelligence in network orchestration system [J]. Telecommunications Science, 2019, 35(5): 9-16.
[10]	Li XIAO,Zhilin YUAN,Chengpeng FU,Weidong MA. Intelligent metro optical networks and key optical components [J]. Telecommunications Science, 2019, 35(4): 33-40.
[11]	Dongshan WANG,Yue MA,Yan LI,Jian GAO,Zhibin YIN. Coordinated and unified control technology of IP and optical transport network for power services [J]. Telecommunications Science, 2019, 35(3): 116-121.
[12]	Jiang ZHOU,Hewu LI. A general way to assign IPv6 trusted address under portal authentication [J]. Telecommunications Science, 2019, 35(12): 8-14.
[13]	Yuan ZHANG. Architecture and key technologies of network on demand for small and medium enterprises [J]. Telecommunications Science, 2018, 34(7): 7-14.
[14]	Cui ZHONG,Lei WANG,Xing LUO. SDN solutions for cloud data center [J]. Telecommunications Science, 2018, 34(7): 15-22.
[15]	Bin ZHUGE,Yihang QI,Hanwen FU,Weiming WANG. Network resource pricing strategy based on SDN framework [J]. Telecommunications Science, 2018, 34(7): 49-61.