网络靶场研究现状与展望

Cyber ranges:survey and perspective

当今社会各种网络安全事件不断发生,网络安全研究受到世界各国高度重视。为了更好地支撑网络安全技术研究,避免攻防演练和技术验证对真实的网络和生产环境造成不良影响,网络靶场应运而生。作为一种特殊的测试平台,网络靶场可提供逼真、可控、灵活的实验环境,能够有效降低研究成本、缩短研究周期、规避研究风险。因此,网络靶场是支持网络空间安全技术研究的重要基础设施和世界各国高度重视的科学实验平台。随着网络靶场基础支撑技术和计算模型的不断演进,网络靶场正面临新的问题与挑战。因此,介绍网络靶场的发展历程、典型分类及技术架构;分析国内外工业界和学术界的研究现状,归纳各国典型靶场的建设情况,梳理靶场关键技术的研究进展;总结网络靶场面临的挑战问题,并展望网络靶场的未来发展趋势,这项工作对国内网络靶场技术研究和网络靶场项目建设具有参考价值。

Various cyber attacks occurred frequently.Increasing attention has been being paid to cyber security by many countries.To support research on cybersecurity technologies and to avoid the potential effects of attack and defense exercises and technical verification on real networks and production environments,numerous cyber ranges emerged.As a special type of testbed,cyber ranges provide a real,controllable,and flexible experimental environment that effectively reduce research costs,shorten research cycles,and avoid research risks.Cyber ranges,being important scientific infrastructure and scientific experimental platforms,are highly valued by countries around the world.With the continuous evolution of basic support technologies and computational models,cyber ranges face new problems and challenges.This study introduced the development history,typical classification,and common architectures of cyber ranges.The current research status,core projects,and key technologies of industrial and academic cyber ranges in our country and foreign countries were analyzed and compared.Fi‐nally,the study summarized the challenges and difficulties faced by cyber range construction and proposed future research directions on cyber ranges.This work has reference value for conducting research and construction of cyber ranges.