基于虚拟化的OSPF协议安全性仿真评估方法

Virtualization-based OSPF Protocol Security Simulation Evaluation Method

OSPF(Open Shortest Path First)协议是重要域内路由协议,但存在诸多安全隐患.为提升OSPF协议的安全性,有必要构建可靠、高效的安全评估体系.鉴于基于实物网络的评估方法存在成本高、灵活性差的不足,以及基于网络仿真软件(如GNS3)的评估方法存在可扩展性差的不足,设计了一种基于虚拟化的OSPF协议安全性仿真评估体系.借助于云计算、虚拟化技术,该体系可为OSPF协议安全性评估提供可扩展、可灵活构建的基础环境.进一步,面向OSPF协议安全性评估的需求,重点研究了基于虚拟化的路由协议仿真技术、OSPF协议安全评估场景的自动化灵活加载技术、面向OSPF协议安全评估的数据采集与效果评估方法.实验验证表明:该体系可对多种典型的OSPF协议攻击场景的进行逼真、灵活且自动化的仿真评估,且在仿真规模上具有可扩展的优势;通过与其他仿真技术的对比表明,该方法在部署时间、仿真性能方面具有优势.

OSPF(open shortest path first)protocol is an important intra-domain routing protocol,but there are many hiddensecurity risks.In order to improve the security of OSPF protocol,it is necessary to build a reliable and efficient security evaluation system.In view of the high cost and poor flexibility of evaluation methods based on physical networks,and the poor scalability of evaluation methods based on network simulation software(such as GNS3),a virtualized OSPF protocol security simulation evaluation system was designed.With the help of cloud computing and virtualization technology,the system can provide an extensible and flexible basic environment for OSPF protocol security evaluation.Further,facing the needs of OSPF protocol security evaluation,this paper focuses on the routing protocol simulation technology based on virtualization,the automatic and flexible loading technology of OSPF protocol security evaluation scenario,and the data acquisition and effect evaluation method for OSPF protocol security evaluation.Experimental results show that the system can carry out realistic,flexible and automatic simulation evaluation for a variety of typical OSPF protocol attack scenarios,and has the advantage of scalability in simulation scale;The comparison with other simulation technologies shows that this method has advantages in deployment time and simulation performance.