基于云的信息安全攻防实践及竞赛平台开发

Practice on cloud-based attack and defense training and development of competition platform for information security

分析了信息安全实践教学的技术现状,提出了建设基于云的信息安全攻防实践及竞赛平台,并给出了具体的建设方案。该平台架构分为教育应用层、应用接口层和基础设施层,主要实训内容包括漏洞测试、手机安全、安全防护、持续控制目标。该方案转变了传统实验模式和管理模式,解决了目前高校信息安全实践环节建设成本高、管理维护效率低、实验室利用率低、优质资源共享程度低等问题。

The main technical status of information security practice teaching is analyzed.It is proposed that the information security attack and defense training and competition platform based on the cloud,and the specific platform construction scheme is presented,at present,this system is in trial operation.This scheme changes the traditional experimental mode and management mode,and solves many current problems,such as high construction cost,inefficient-maintenance and management,low utilization of laboratory,ineffective sharing of excellent resources,moreover,this platform can encourage the students to study hard and improve the teachers＇ work enthusiasm.