网络靶场研究现状与展望

邹星; 胡宁; 顾钊铨; 贾焰

doi:10.11959/j.issn.2096-109x.2024063

您当前的位置：

首页 >

文章列表页 >

网络靶场研究现状与展望

综述 | 更新时间：2024-12-20

- 网络靶场研究现状与展望
- Cyber ranges: survey and perspective
- 网络与信息安全学报 2024年10卷第5期页码：1-22
- 作者机构：
  
  1.鹏城实验室新型网络研究部，广东深圳 518055
  2.哈尔滨工业大学（深圳）计算机科学与技术学院，广东深圳 518055
- 作者简介：
  
  [ "邹星（1994- ），女，湖北荆州人，鹏城实验室助理工程师，主要研究方向为网络空间安全、网络靶场、云计算。" ]
  [ "胡宁（1972- ），男，湖南长沙人，鹏城实验室研究员、博士生导师，主要研究方向为网络空间安全、工业控制系统安全、软件定义网络与网络虚拟化。" ]
  [ "顾钊铨（1989- ），男，四川巴中人，哈尔滨工业大学（深圳）教授，鹏城实验室研究员、博士生导师，主要研究方向为网络靶场、网络攻击研判、人工智能安全。" ]
  [ "贾焰（1960- ），女，四川成都人，鹏城实验室研究员、博士生导师，主要研究方向为网络空间安全、大数据分析和人工智能。" ]
- 基金信息：
  
  鹏城实验室重大攻关项目(PCL2023A07-4)
- DOI：10.11959/j.issn.2096-109x.2024063
  中图分类号： TP393.08
- 收稿：2024-04-18，
  
  修回：2024-06-11，
  
  纸质出版：2024-10-25
- 稿件说明：
移动端阅览
邹星, 胡宁, 顾钊铨, 等. 网络靶场研究现状与展望[J]. 网络与信息安全学报, 2024, 10(5): 1-22.

Format: ZOU X, HU N, GU Z Q, et al. Cyber ranges: survey and perspective[J]. Chinese Journal of Network and Information Security, 2024, 10(5): 1-22.
邹星, 胡宁, 顾钊铨, 等. 网络靶场研究现状与展望[J]. 网络与信息安全学报, 2024, 10(5): 1-22. DOI： 10.11959/j.issn.2096-109x.2024063.

Format: ZOU X, HU N, GU Z Q, et al. Cyber ranges: survey and perspective[J]. Chinese Journal of Network and Information Security, 2024, 10(5): 1-22. DOI： 10.11959/j.issn.2096-109x.2024063.

摘要

当今社会各种网络安全事件不断发生，网络安全研究受到世界各国高度重视。为了更好地支撑网络安全技术研究，避免攻防演练和技术验证对真实的网络和生产环境造成不良影响，网络靶场应运而生。作为一种特殊的测试平台，网络靶场可提供逼真、可控、灵活的实验环境，能够有效降低研究成本、缩短研究周期、规避研究风险。因此，网络靶场是支持网络空间安全技术研究的重要基础设施和世界各国高度重视的科学实验平台。随着网络靶场基础支撑技术和计算模型的不断演进，网络靶场正面临新的问题与挑战。因此，介绍网络靶场的发展历程、典型分类及技术架构；分析国内外工业界和学术界的研究现状，归纳各国典型靶场的建设情况，梳理靶场关键技术的研究进展；总结网络靶场面临的挑战问题，并展望网络靶场的未来发展趋势，这项工作对国内网络靶场技术研究和网络靶场项目建设具有参考价值。

Abstract

Various cyber attacks occurred frequently. Increasing attention has been being paid to cyber security by many countries. To support research on cybersecurity technologies and to avoid the potential effects of attack and defense exercises and technical verification on real networks and production environments

numerous cyber ranges emerged. As a special type of testbed

cyber ranges provide a real

controllable

and flexible experimental environment that effectively reduce research costs

shorten research cycles

and avoid research risks. Cyber ranges

being important scientific infrastructure and scientific experimental platforms

are highly valued by countries around the world. With the continuous evolution of basic support technologies and computational models

cyber ranges face new problems and challenges. This study introduced the development history

typical classification

and common architectures of cyber ranges. The current research status

core projects

and key technologies of industrial and academic cyber ranges in our country and foreign countries were analyzed and compared. Finally

the study summarized the challenges and difficulties faced by cyber range construction and proposed future research directions on cyber ranges. This work has reference value for conducting research and construction of cyber ranges.

关键词

Keywords

references

方滨兴 . 定义网络空间安全 [J ] . 网络与信息安全学报 , 2018 , 4 ( 1 ): 1 - 5 .

FANG B X . Define cyberspace security [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 1 ): 1 - 5

李馥娟 , 王群 . 网络靶场及其关键技术研究 [J ] . 计算机工程与应用 , 2022 , 58 ( 5 ): 12 - 22 .

LI F J , WANG Q . Research on cyber ranges and its key technologies [J ] . Computer Engineering and Applications , 2022 , 58 ( 5 ): 12 - 22 .

方滨兴 , 贾焰 , 李爱平 , 等 . 网络空间靶场技术研究 [J ] . 信息安全学报 , 2016 , 1 ( 3 ): 1 - 9 .

FANG B X , JIA Y , LI A P , et al . Cyber ranges: state-of-the-art and research challenges [J ] . Journal of Cyber Security , 2016 , 1 ( 3 ): 1 - 9 .

FERGUSON B , TALL A , OLSEN D . National cyber range overview [C ] // Proceedings of the 2014 IEEE Military Communications Conference . Piscataway : IEEE Press , 2014 : 123 - 128 .

NIST Cyber Range Project Team and the NICE Community . The cyber range: a guide [R ] . 2023 .

European Cyber Security Organisation (ECSO) . Understanding cyber ranges: from hype to reality [R ] . 2020 .

UKWANDU E , FARAH M A B , HINDY H , et al . A review of cyber-ranges and test-beds: current and future trends [J ] . Sensors , 2020 , 20 ( 24 ): 7148 .

李宁 , 刘俊 , 张君 , 等 . 2023年全球网络演习概览 [J ] . 信息安全与通信保密 , 2024 , 22 ( 1 ): 26 - 33 .

LI N , LIU J , ZHANG J , et al . Overview of the global cyber exercise in 2023 [J ] . Information Security and Communications Privacy , 2024 , 22 ( 1 ): 26 - 33 .

李伦 , 王曦 , 郝志宇 . 美国网络空间靶场建设情况综述 [J ] . 保密科学技术 , 2021 ( 6 ): 53 - 60 .

LI L , WANG X , HAO Z Y . A summary of the construction of cyberspace shooting range in the United States [J ] . Secrecy Science and Technology , 2021 ( 6 ): 53 - 60 .

李秋香 , 郝文江 , 李翠翠 , 等 . 国外网络靶场技术现状及启示 [J ] . 信息网络安全 , 2014 ( 9 ): 63 - 68 .

LI Q X , HAO W J , LI C C , et al . Present situation and enlightenment of the foreign network range technology [J ] . Netinfo Security , 2014 ( 9 ): 63 - 68 .

CARY D . Downrange: a survey of china’s cyber ranges [J ] . Center for Security and Emerging Technology , September , 2022 .

陈丽 , 段红 , 李革 . 大数据技术在网络靶场中的发展趋势研究 [C ] // 第24届中国系统仿真技术及其应用学术年会论文集 . 合肥 , 2023 : 111 - 115 .

CHEN L , DUAN H , LI G . Research on the development trend of big data technology in cyber range [C ] // CCSSTA 24th 2023 , Hefei , 2023 : 111 - 115 .

李冬 , 于俊清 , 谷永普 , 等 . 高效安全的软件定义网络拓扑发现协议 [J ] . 网络与信息安全学报 , 2023 , 9 ( 6 ): 20 - 33 .

LI D , YU J Q , GU Y P , et al . Efficient and safe software defined network topology discovery protocol [J ] . Chinese Journal of Network and Information Security , 2023 , 9 ( 6 ): 20 - 33 .

王佰玲 , 刘红日 , 张耀方 , 等 . 工业控制系统安全仿真关键技术研究综述 [J ] . 系统仿真学报 , 2021 , 33 ( 6 ): 1466 - 1488 .

WANG B L , LIU H R , ZHANG Y F , et al . Review on key technologies of industrial control system security simulation [J ] . Journal of System Simulation , 2021 , 33 ( 6 ): 1466 - 1488 .

张淼 , 许凯 , 彭勇 , 等 . 建模与仿真服务化研究综述 [J ] . 自动化学报 , 2023 , 49 ( 8 ): 1601 - 1620 .

ZHANG M , XU K , PENG Y , et al . Overview of servitization of modeling and simulation [J ] . Acta Automatica Sinica , 2023 , 49 ( 8 ): 1601 - 1620 .

邱志明 , 李恒 , 周玉芳 , 等 . 模拟仿真技术及其在训练领域的应用综述 [J ] . 系统仿真学报 , 2023 , 35 ( 6 ): 1131 - 1143 .

QIU Z M , LI H , ZHOU Y F , et al . Summary of simulation technology and its application in training field [J ] . Journal of System Simulation , 2023 , 35 ( 6 ): 1131 - 1143 .

DAVIS J , MAGRATH S . A survey of cyber ranges and testbeds [R ] . 2013 .

HOLM H , KARRESAND M , VIDSTRÖM A , et al . A survey of industrial control system testbeds [M ] . Secure IT Systems : vol 9417. Cham: Springer , 2015 : 11 - 26 .

VYKOPAL J , VIZVARY M , OSLEJSEK R , et al . Lessons learned from complex hands-on defence exercises in a cyber range [C ] // Proceedings of the 2017 IEEE Frontiers in Education Conference (FIE) . Piscataway : IEEE Press , 2017 : 1 - 8 .

PRIYADARSHINI I . Features and architecture of the modern cyber range: a qualitative analysis and survey [D ] . Newark : University of Delaware , 2018 .

YAMIN M M , KATT B , GKIOULOS V . Cyber ranges and security testbeds: scenarios, functions, tools and architecture [J ] . Computers & Security , 2020 , 88 : 101636 .

CHOULIARAS N , GEORGE K , IOANNA K , et al . Cyber ranges and TestBeds for education, training, and research [J ] . Applied Sciences , 2021 , 11 ( 4 ): 1809 .

GLAS M , VIELBERTH M , PERNUL G . Train as you fight: evaluating authentic cybersecurity training in cyber ranges [C ] // Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems . New York : ACM , 2023 : 1 - 19 .

VYRON K , GKIOULOS V , KATSIKAS S . A systematic literature review on wireless security testbeds in the cyber-physical realm [J ] . Computers & Security , 2023 , 133 : 103383 .

符永铨 , 赵辉 , 王晓锋 , 等 . 网络行为仿真综述 [J ] . 软件学报 , 2022 , 33 ( 1 ): 274 - 296 .

FU Y Q , ZHAO H , WANG X F , et al . State-of-the-art survey on network behavior emulation [J ] . Journal of Software , 2022 , 33 ( 1 ): 274 - 296 .

LEBLANC S P , PARTINGTON A , CHAPMAN I , et al . An over-view of cyber attack and computer network operations simulation [C ] // Proceedings of the 2011 Military Modeling & Simulation Symposium , 2011 : 92 - 100 .

WEHRLE K , GÜNEŞ M , GROSS J . Modeling and tools for network simulation [M ] . Berlin : Springer , 2010 .

GOMEZ J , KFOURY E F , CRICHIGNO J , et al . A survey on network simulators, emulators, and testbeds used for research and education [J ] . Computer Networks , 2023 , 237 : 110054 .

LIU C H , YAN W , XU F K , et al . User behavior simulation in ICS cyber ranges [C ] // Proceedings of the 2022 19th Annual International Conference on Privacy , Security & Trust (PST) . Piscataway : IEEE Press , 2022 : 1 - 5 .

吴佩翔 , 张志龙 , 陈力波 , 等 . 针对5G核心网协议的自动化漏洞挖掘方法 [J ] . 网络与信息安全学报 , 2024 , 10 ( 1 ): 156 - 168 .

WU P X , ZHANG Z L , CHEN L B , et al . Automated vulnerability discovery method for 5G core network protocol [J ] . Chinese Journal of Network and Information Security , 2024 , 10 ( 1 ): 156 - 168 .

MOSKAL S , YANG S J , KUHL M E . Cyber threat assessment via attack scenario simulation using an integrated adversary and network modeling approach [J ] . The Journal of Defense Modeling and Simulation: Applications, Methodology, Technology , 2018 , 15 ( 1 ): 13 - 29 .

PAN W Q , LIU X H , HAN J , et al . Scorpio: an automated penetration testing tool and its integration with a cyber range [C ] // Proceedings of the 2021 2nd International Conference on Electronics, Communications and Information Technology (CECIT) . Piscataway : IEEE Press , 2021 : 1113 - 1119 .

JIANG H T , CHOI T , KO R K L . Pandora: a cyber range environment for the safe testing and deployment of autonomous cyber attack tools [C ] // International Symposium on Security in Computing and Communication . Singapore : Springer , 2021 : 1 - 20 .

ANTONOPOULOS M , DRAINAKIS G , OUZOUNOGLOU E , et al . Design and proof of concept of a prediction engine for decision support during cyber range attack simulations in the maritime domain [C ] // Proceedings of the 2022 IEEE International Conference on Cyber Security and Resilience (CSR) . Piscataway : IEEE Press , 2022 : 305 - 310 .

段红 , 邱晓刚 . 网络化仿真及其发展趋势 [J ] . 系统仿真学报 , 2021 , 33 ( 7 ): 1526 - 1533 .

DUAN H , QIU X G . Networked simulation and it’s development trend [J ] . Journal of System Simulation , 2021 , 33 ( 7 ): 1526 - 1533 .

PHAM C , TANG D , CHINEN K I , et al . CyRIS: a cyber range instantiation system for facilitating security training [C ] // Proceedings of the Seventh Symposium on Information and Communication Technology . New York : ACM , 2016 : 251 - 258 .

SCHOONOVER K , MICHALAK E , HARRIS S , et al . Galaxy: a network emulation framework for cyber security [C ] // Proceedings of 11th USENIX Workshop on Cyber Security Experimentation and Test (CSET 18). 2018 .

CHEN Y , ZHANG G J , HU D L , et al . Multiscale emulation technology based on the integration of virtualization, physical and simulation networks [C ] // Proceedings of the 2019 IEEE Fourth International Conference on Data Science in Cyberspace (DSC) . Piscataway : IEEE Press , 2019 : 396 - 402 .

刘渊 , 邱常伶 , 王晓锋 , 等 . 面向多尺度融合网络仿真的拓扑映射方法研究 [J ] . 系统仿真学报 , 2019 , 31 ( 10 ): 2030 - 2041 .

LIU Y , QIU C L , WANG X F , et al . Research on topology mapping method for multiscale integration network emulation [J ] . Journal of System Simulation , 2019 , 31 ( 10 ): 2030 - 2041 .

王晓锋 , 谌泰乾 , 刘渊 . 面向卫星互联网的动态仿真技术研究 [J ] . 系统仿真学报 , 2023 , 35 ( 7 ): 1472 - 1486 .

WANG X F , CHEN T Q , LIU Y . Research on dynamic simulation technology for satellite Internet [J ] . Journal of System Simulation , 2023 , 35 ( 7 ): 1472 - 1486 .

ADELEKE O A , BASTIN N , GURKAN D . Network traffic generation: a survey and methodology [J ] . ACM Computing Surveys , 2023 , 55 ( 2 ): 1 - 23 .

JAVALI C , REVADIGAR G . Network web traffic generator for cyber range exercises [C ] // Proceedings of the 2019 IEEE 44th Conference on Local Computer Networks (LCN) . Piscataway : IEEE Press , 2019 : 308 - 315 .

李松 , 周亚同 , 池越 , 等 . 高斯过程混合模型应用于网络流量预测研究 [J ] . 计算机工程与应用 , 2020 , 56 ( 5 ): 186 - 193 .

LI S , ZHOU Y T , CHI Y , et al . Application of Gaussian process mixture model on network traffic prediction [J ] . Computer Engineering and Applications , 2020 , 56 ( 5 ): 186 - 193 .

LEE C . Method for providing background traffic using IP random assigning in cyber range [J ] . Electronics Letters , 2021 , 57 ( 6 ): 261 - 263 .

DU L F , HE J J , LI T , et al . DBWE-Corbat: background network traffic generation using dynamic word embedding and contrastive learning for cyber range [J ] . Computers & Security , 2023 , 129 : 103202 .

HUANG X , WANG X F , LIU Y , et al . A distributed traffic replay framework for network emulation [J ] . Information , 2023 , 14 ( 2 ): 59 .

王进文 , 张晓丽 , 李琦 , 等 . 网络功能虚拟化技术研究进展 [J ] . 计算机学报 , 2019 , 42 ( 2 ): 185 - 206 .

WANG J W , ZHANG X L , LI Q , et al . Network function virtualization technology: a survey [J ] . Chinese Journal of Computers , 2019 , 42 ( 2 ): 185 - 206 .

ČELEDA P , ČEGAN J , VYKOPAL J , et al . Kypo–a platform for cyber defence exercises [J ] . M&S Support to Operational Tasks Including War Gaming , Logistics, Cyber Defence. 2015 .

RUSSO E , COSTA G , ARMANDO A . Building next generation cyber ranges with CRACK [J ] . Computers & Security , 2020 , 95 : 101837 .

LEITNER M , FRANK M , HOTWAGNER W , et al . AIT cyber range: flexible cyber security environment for exercises, training and research [C ] // Proceedings of the European Interdisciplinary Cybersecurity Conference . New York : ACM , 2020 : 1 - 6 .

COSTA G , RUSSO E , ARMANDO A . Automating the generation of cyber range virtual scenarios with VSDL [J ] . Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications , 2022 , 13 ( 4 ): 61 - 80 .

BRAGHIN C , CIMATO S , DAMIANI E , et al . A model driven approach for cyber security scenarios deployment [M ] . Computer Security . Cham : Springer International Publishing , 2020 : 107 - 122 .

MARTOU P , MENS K , DUHOUX B , et al . Generating virtual scenarios for cyber ranges from feature-based context-oriented models: a case study [C ] // Proceedings of the 14th ACM International Workshop on Context-Oriented Programming and Advanced Modularity . New York : ACM , 2022 : 35 - 43 .

YAMIN M M , KATT B . Modeling and executing cyber security exercise scenarios in cyber ranges [J ] . Computers & Security , 2022 , 116 : 102635 .

KARJALAINEN M , KOKKONEN T . Comprehensive cyber arena; the next generation cyber range [C ] // Proceedings of the 2020 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) . Piscataway : IEEE Press , 2020 : 11 - 16 .

OSABA E , PIERDICCA R , MALINVERNI E , et al . A smartphone-based system for outdoor data gathering using a wireless beacon network and GPS data: from cyber spaces to senseable spaces [J ] . ISPRS International Journal of Geo-Information , 2018 , 7 ( 5 ): 190 .

TIAN Z H , CUI Y , AN L , et al . A real-time correlation of host-level events in cyber range service for smart campus [J ] . IEEE Access , 2018 , 6 : 35355 - 35364 .

姚俊萍 , 范守祥 , 李晓军 . 网络数据多通道采集质量跨层控制方法仿真 [J ] . 计算机仿真 , 2019 , 36 ( 10 ): 289 - 292 .

YAO J P , FAN S X , LI X J . Simulation of multi-channel acquisition quality cross-layer control method for network data [J ] . Computer Simulation , 2019 , 36 ( 10 ): 289 - 292 .

TAO H , BHUIYAN M Z A , RAHMAN M A , et al . TrustData: trustworthy and secured data collection for event detection in industrial cyber-physical system [J ] . IEEE Transactions on Industrial Informatics , 2020 , 16 ( 5 ): 3311 - 3321 .

GRANÅSEN M , HUSKAJ G , VARGA S . Data collection and research in CDXs: command and control, cyber situational awareness and intelligence perspectives on cyber defense [C ] // Proceedings of 24th International Command and Control Research and Technology Symposium (ICCRTS) , USA : International Command and Control Institute , 2019 .

LI S , DU S , HUANG W , et al . A light-weighted data collection method for DNS simulation on the cyber range [J ] . KSII Transactions on Internet and Information Systems , 2020 , 14 ( 8 ): 3501 - 3518 .

ANDREOLINI M , COLACINO V G , COLAJANNI M , et al . A framework for the evaluation of trainee performance in cyber range exercises [J ] . Mobile Networks and Applications , 2020 , 25 ( 1 ): 236 - 247 .

BRAGHIN C , CIMATO S , DAMIANI E , et al . Towards the monitoring and evaluation of trainees’ activities in cyber ranges [C ] . International Workshop on Model-Driven Simulation and Training Environments for Cybersecurity . Cham : Springer , 2020 : 79 - 91 .

ERDOGAN G , HUGO Å , ROMERO A , et al . An approach to train and evaluate the cybersecurity skills of participants in cyber ranges based on cyber-risk models [C ] // Proceedings of the 15th International Conference on Software Technologies . SCITEPRESS - Science and Technology Publications , 2020 : 509 - 520 .

DIAKOUMAKOS J , CHASKOS E , KOLOKOTRONIS N , et al . Cyber-range federation and cyber-security games: a gamification scoring model [C ] // Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience (CSR) . Piscataway : IEEE Press , 2021 : 186 - 191 .

ORBINATO V . A next-generation platform for cyber range-as-a-service [C ] // Proceedings of the 2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) . Piscataway : IEEE Press , 2021 : 314 - 318 .

LUISE A P , PERRONE G , PERROTTA C , et al . On-demand deployment and orchestration of cyber ranges in the cloud [C ] // ITASEC . 2021 : 80 - 91 .

FU Y Q , HAN W H , YUAN D . Orchestrating heterogeneous cyber range event chains with Serverless-container workflow [C ] // Proceedings of the 2022 30th International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems (MASCOTS) . Piscataway : IEEE Press , 2022 : 97 - 104 .

XIE J J , ZHANG C R , LOU F , et al . High-speed file transferring over linux bridge for QGA enhancement in cyber range [C ] // International Conference on Artificial Intelligence and Security . Cham : Springer , 2019 : 452 - 462 .

TERASHIMA T , NAKAYAMA M , YOKOYAMA T , et al . KAKOI: a new tool to make simple and secure build cyber ranges using public cloud [C ] // Proceedings of the 2021 Ninth International Symposium on Computing and Networking Workshops (CANDARW) . Piscataway : IEEE Press , 2021 : 398 - 404 .

GU Z . MDATA: a new knowledge representation model: theory, methods and applications [M ] . Cham : Springer , 2021 .

DEMERTZI V , DEMERTZIS S , DEMERTZIS K . An overview of cyber threats, attacks and countermeasures on the primary domains of smart cities [J ] . Applied Sciences , 2023 , 13 ( 2 ): 790 .

JIA Y , GU Z Q , DU L , et al . Artificial intelligence enabled cyber security defense for smart cities: a novel attack detection framework based on the MDATA model [J ] . Knowledge-Based Systems , 2023 , 276 : 110781 .

DU D J , ZHU M G , LI X , et al . A review on cybersecurity analysis, attack detection, and attack defense methods in cyber-physical power systems [J ] . Journal of Modern Power Systems and Clean Energy , 2023 , 11 ( 3 ): 727 - 743 .

VYKOPAL J , OŠLEJŠEK R , ČELEDA P , et al . KYPO cyber range: design and use cases [C ] // International Conference on Software Technologies (ICSOFT’ 17). 2017 : 310 - 321 .

浏览量

1031

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于时间压缩的流量加速回放方法

基于智能合约的高对抗性僵尸网络研究

基于可分离卷积的轻量级恶意域名检测模型

网络动态防御体系下主机安全威胁分析方法

社交网络异常用户检测技术研究进展