摘要
互联网面临的安全问题越来越严重,网络安全人才极度匮乏,如何快速培养安全技术人才是亟待解决的问题.网络空间安全对抗演练是一种客观考察安全人才综合能力的方法,也是一种快速培养安全人才、提高网络安全技术能力的方法.现有的网络安全竞赛主要包括单对单对抗、单向攻击对抗、高地抢夺和阵地互攻击4种对抗演练模式,但是各个模式间含义相互交叉且其特征模糊.依据选手角色和目标网络的特征对模型进行分类,基于选手角色构建了单角色、双角色模型,基于目标网络构建了单级别和多级别网络模型,提出并构建了一种双角色多级别的网络对抗演练模型.基于该模型以云计算、虚拟化平台为基础设计并实现了一个网络空间安全对抗演练系统,通过2015年信息安全与对抗技术竞赛实践,对系统的部署效率及系统稳定性进行了测试,测试结果表明系统运行稳定,可靠性、适用性强.
Facing more and more serious Internet security problems and the shortage of network security professionals,the problem of how to cultivate professionals rapidly must be urgently resolved.Cyberspace security confrontation simulation is a method that can cultivate security professionals efficiently and improve the ability of security technology.Currently,network security competitions mainly consist of four models,namely point-to-point confrontation,one-way attack,public positional inter-attack and private positional inter-attack,whose notion and boundaries between each other,however,are ambiguous and confusing.This paper classified these models according to characteristics of the athletes and the target network.They can be classified as single role and dual role model,based on the athletes＇ character;the single level and multi-level model,based on the target network.A dual role of multi-level network confrontation simulation model is proposed and constructed.A cyberspace security confrontation simulation system based on cloud computing and virtualization is designed.This system has been stably used in the Information Security and Countermeasures Contest in 2015,whose deployment efficiency and system stability has been tested with results showing that this system was highly reliable and suitable.
出处
《信息安全研究》
2016年第8期712-720,共9页
Journal of Information Security Research
关键词
信息安全技术竞赛
对抗
演练
网络空间安全
信息安全
information security and countermeasures contest
ISCC
countermeasures simulation
cyberspace security
information security
