基于虚拟机技术的入侵检测系统攻击仿真平台的研究和实现

The Research and Implementation of Attack Simulation Platform for Testing Intrusion Detection System Based on Virtual Machine Technology

攻击仿真平台是入侵检测系统(Intrusion Detectoin System,IDS)测试平台的核心组成部分,该文从攻击测试的角度,提出了一种基于虚拟机技术的IDS攻击仿真平台.首先介绍攻击仿真的测试目标和内容,并提出了攻击仿真系统和仿真平台的设计和实现的详细方案;同时,在此基础上,对该平台的设计和实现的3个关键技术,测试数据的选择、攻击技术的分类研究、攻击测试域及其划分等进行了进一步的分析,最后给出并分析了实验测试结果。

Attack simulation plays a key role in testing Intrusion Detection System(IDS). From the viewpoint of attack testing, an attack simulation platform is put forward for testing IDS based on virtual machine technology. First of all, the testing aims and contents of attack simulation are proposed. Then, the design and implementation of the attack simulation platform are presented in detail. Under the platform, that the authors build, three key issues in realization of the platform: the choice of testing datum, the classification of attack technology, and the attack testing zones and their compartmentalization are discussed in detail. Finally, the test results are given.