摘要
提出了基于开源架构的虚拟网络安全实验平台的解决方案,利用KVM技术、软件定义网络技术以及基于ISCSI协议的网络存储技术等实现了该方案,并给出了2个常用的实验模板。实验表明:使用者利用该网络安全实验平台可构建各种网络渗透实验测试环境及虚拟企业网络数据存储环境。与基于VMware虚拟化技术解决方案相比,该网络安全实验平台具有网络访问控制灵活、无需购买商业授权以及硬件资源占用少等优点。
A construction approach on virtual platform network for security experiment based upon open source architecture is proposed.The proposed scheme is implemented with KVM（Kernel-based Virtual Machine）,SDN（Software-Define Networking）,and based on ISCSI protocol of network storage technology as well.Two common experimental templates are presented to facilitate the usage of the proposed platform.By using the templates,users can perform variable experiments on the proposed platform,such as network exploitation test and virtual enterprise network data storage environment.Compared with VMware-based virtualization technology,the proposed mechanism manifest is beneficial to laboratory of network security with flexible network access control,less hardware costs,and without software license fees as well.
出处
《实验技术与管理》
CAS
北大核心
2015年第7期120-123,155,共5页
Experimental Technology and Management
基金
国家自然科学基金项目(61103114)
重庆市教委科学技术研究项目(KJ132207)
关键词
网络安全
实验教学
KVM
软件定义网络
network security
experimental teaching
Kernel-based Virtual Machine（KVM）
Software-Define Networking（SDN）
