山东科学 ›› 2020, Vol. 33 ›› Issue (5): 127-134.doi: 10.3976/j.issn.1002-4026.2020.05.016

• 其他研究论文 • 上一篇    

教学用网络靶场的架构设计

张月红
  

  1. 上海电子信息职业技术学院 通信与信息工程学院,上海 201411
  • 收稿日期:2020-02-28 出版日期:2020-10-08 发布日期:2020-09-27
  • 作者简介:张月红(1975—),女,硕士,副教授,研究方向为渗透测试、漏洞挖掘和Web安全。E-mail: 64688613@qq.com

Architecture design of the cyber range for teaching

ZHANG Yue-hong   

  1. School of Communication and Information Engineering,Shanghai Technical Institute of Electronics&Information, Shanghai 201411, China

  • Received:2020-02-28 Online:2020-10-08 Published:2020-09-27

摘要: 高等院校基于校内实训环境建设的网络靶场旨在通过模拟企业应用场景,让学生理解业务安全需求,且能通过实时收集学生在平台的学习和训练数据进行评估,促进学生安全技能的不断提升。针对用于教学单位的网络靶场进行需求分析和架构的初步设计,提出了校园网络靶场学习和训练的3种维度,分别是基于课堂基础知识的实践模块、自定义进度的安全挑战和基于团队的动态练习,从这三个维度来合力驱动网络靶场训练,达到培养更全面安全人才的目标。

关键词: 网络靶场, 需求分析, 架构设计, 训练维度

Abstract: The purpose of the cyber range based on the training environment in colleges and universities is to help students understand the business security needs by simulating the enterprise application scenarios, and promote the continuous improvement of students′ security skills through collect and evaluate the learning and training data on the platform in real time. In this paper, demand analysis and preliminary architecture design of the cyber range used in teaching units are carried out, and three dimensions in learning and training of a campus cyber range are proposed, which is practice module based on basic class knowledge, user-defined rate of progress of security challenge, dynamic practice based on team, respectively. Cyber range training are jointly driven by the three dimensions to cultivate the security professional  in a more comprehensive manner.

Key words: cyber range, demand analysis, architecture design, training dimensions

中图分类号: 

  • TP311.1

开放获取 本文遵循知识共享-署名-非商业性4.0国际许可协议(CC BY-NC 4.0),允许第三方对本刊发表的论文自由共享(即在任何媒介以任何形式复制、发行原文)、演绎(即修改、转换或以原文为基础进行创作),必须给出适当的署名,提供指向本文许可协议的链接,同时表明是否对原文作了修改,不得将本文用于商业目的。CC BY-NC 4.0许可协议详情请访问 https://creativecommons.org/licenses/by-nc/4.0