基于虚拟化的网络演练竞技平台的设计与实现

发布时间：2018-06-08 06:04

本文选题：网络攻防 + 虚拟化　；参考：《北京邮电大学》2017年硕士论文

【摘要】：随着云计算和虚拟化技术越来越受到关注,对基于虚拟化的实验教学平台的研究也越来越多,但对于网络攻防演练竞技类的平台的研究却并没有很多。并且当今网络安全的竞技比赛还是基于实体物理机来进行,形式比较传统。为此,本文拟借助虚拟化技术,设计并实现一个基于虚拟化的网络演练竞技平台。本平台是一个基于KVM虚拟化技术的B/S架构的竞技平台,提供基于互联网的信息安全攻防实战演练竞技比赛。平台有创建题库、创建比赛、设置比赛环境、学生参赛、评分、成绩查看等完整的逻辑流程,可以实现学生在虚拟的竞技环境中进行比赛,支持不同客户端的访问。该平台旨在解决传统竞技平台的环境搭建困难、使用受限和破坏性大等问题,通过互联网平台为学生提供攻防实战演练竞技平台,从而促使学生不断学习积累新知识,并将掌握的知识应用到实际问题中,进而提高学生的实践和应用能力,使学生既有扎实的理论基础,又有较强的动手操作和应用能力。针对以上目标,论文在写作和系统的设计方面主要做了以下工作:(1)通过对网络演练竞技平台的研究背景和国内外现状的了解,通过和部分高校老师人员的沟通,确定本论文的研究内容和目标,.并给出了论文内容的组织框架。(2)详细介绍在平台开发过程中使用到的关键技术和框架等,包括虚拟化技术、数据库技术、平台框架、libvirt接口,并对相关技术进行了学习,为之后平台的设计和实现打下理论基础。(3)通过总结上面所述的理论和技术,提出基于虚拟化的网络攻防演练竞技平台的软件架构,并对平台的需求分析和概要设计进行了详细的阐述。平台主要包括系统管理子系统、竞技管理子系统、竞技比赛子系统,分别对应管理员、教师、学生角色。(4)根据平台的概要设计,对平台进行了详细设计并给出详细介绍。根据详细设计,使用关键技术进行实际开发,对各模块采用特定的语言和框架,使资源得到最大化利用,并介绍了详细的实现过程。(5)搭建测试环境,对系统进行功能测试和性能测试,并针对有关问题进行了改进。
[Abstract]:With the increasing attention to cloud computing and virtualization technology, there are more and more research on the experimental teaching platform based on virtualization, but there is not much research on the platform of network attack and defense drills. And now the network security competition is still based on physical physics machine, the form is more traditional. Therefore, this paper designs and implements a virtualization-based network exercise platform with the help of virtualization technology. This platform is based on KVM virtualization technology based on the B / S architecture of the competitive platform to provide information security based on the Internet combat and defense competitive competition. The platform has complete logic flow, such as creating question bank, creating competition, setting up competition environment, students participating in the competition, scoring, checking scores, and so on, which can realize the students to compete in the virtual competitive environment and support different clients' access. The platform aims to solve the problems of setting up the environment of the traditional competitive platform, limit the use and destructiveness, and provide the students with the competitive platform of attack and defense practice through the Internet platform, so as to encourage the students to continuously learn and accumulate new knowledge. The knowledge is applied to the practical problems, and the students' ability of practice and application can be improved so that the students have not only solid theoretical foundation, but also strong ability of practical operation and application. Aiming at the above goal, the thesis mainly did the following work in writing and system design: 1) through the understanding of the research background of the competitive platform of network drill and the current situation at home and abroad, and through the communication with some teachers in colleges and universities, Determine the research content and objectives of this paper. The key technologies and frameworks used in the development of the platform are introduced in detail, including virtualization technology, database technology, platform framework and libvirt interface. Lay a theoretical foundation for the later design and implementation of the platform. 3) by summarizing the theory and technology mentioned above, the paper puts forward the software architecture of the network attack and defense drill competitive platform based on virtualization. The requirement analysis and outline design of the platform are described in detail. The platform mainly includes system management subsystem, competitive competition subsystem, corresponding administrator, teacher, student role. 4) according to the outline design of the platform, the platform is designed and introduced in detail. According to the detailed design, using the key technology to carry on the actual development, adopting the specific language and the frame to each module, make the resources get the maximum utilization, and introduced the detailed realization process. The function and performance of the system are tested, and some problems are improved.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP311.52;TP393.08

【参考文献】