工控网络安全靶场异构资源建模封装技术研究

Research on heterogeneous resource modeling and encapsulation technology of industrial cyber range

针对工控网络安全靶场的异构资源种类多、管控难的问题,采用元建模的方式对各类试验资源进行建模,分类并统一描述真实资源的功能、性能、接口、形态等属性,建立与真实资源映射的模型,实现模型复用、快速重构;分析资源的管控接口、采集接口和I/O接口,建立资源构件化封装规范,对各类资源进行构件化封装,为工控网络安全靶场资源的灵活配置、自动管控提供技术支撑。通过软件工具对资源建模封装的方法进行了验证。该研究的意义在于通过建模封装技术,实现对资源的可视化操作和统一管理。

In order to solve the controlling difficulty of the diversified heterogeneous resources of industrial network cyber range,a various-resource-based meta-modeling approach is adopted to model,classify and describe the functions,performance,interfaces,forms and other attributes of the real resource in a unified way,which maps the real resource to achieve model reuse and rapid reconstruction.Based on analyzing the management and control interface,collection interface and I/O interface of the resources,this paper establishes and realizes the component based resource encapsulation specification,so as to provide technical support for the flexible allocation and automatic management of industrial control network cyber range resources.The method of resource modeling encapsulation is verified by software tools.The significance of this paper is to realize the visual operation and unified management of the resources through modeling encapsulation technology.