虚拟化工控网络靶场的设计与自动化部署

Design and automatic deployment of virtual industrial control network range

21世纪互联网的高速发展带动了工业信息化的革新,越来越多的工业控制系统由原先的封闭网络转入开放互联网络,在资源利用率和工作效率不断提升的同时,工业控制系统的脆弱性也逐渐暴露在公众视角中。工控安全研究起步晚,现有能应对网络化、信息化工控安全问题的人才储备不足。同时,由于工业控制系统的复杂性、专业性和封闭性,市场上可用于工控安全研究及测试的软硬件平台不多,且都普遍存在成本投入大、操作复杂、灵活性不高等问题。本文给出了一种基于虚拟化技术的工控网络靶场解决方案,利用OpenStack和Snort等系统,以低投入、低消耗的代价实现了工业控制场景的虚拟化仿真,使工控安全教育研究能在虚拟化平台上开展。

The rapid development of the Internet in the 21st century has led to the innovation of industrial informatization.More and more industrial control systems have been transferred from the original closed network to the open Internet.While the resource utilization rate and work efficiency have been continuously improved,the vulnerability of industrial control systems has been gradually exposed in the public perspective.The study of industrial control safety started late,and there are insufficient talents to deal with the problem of industrial control safety under network and informatization.At the same time,due to the complexity,professionalism and closure of the industrial control system,there are not many software and hardware platforms available for industrial control safety research and testing in the market,and there are widespread problems such as large cost input,complex operation and low flexibility.This paper presents an industrial control network range solution based on virtualization technology.OpenStack and Snort systems are used to realize the virtual simulation of industrial control scenarios at a low cost of investment and consumption,so that the research on industrial control safety education can be carried out on the virtualization platform.