Network shooting range security management and control system and method

Abstract

The invention provides a network shooting range security management and control system, which comprises a plurality of physical node devices and virtual network bridges established on the physical node devices and used for performing access control in the same security domain, the virtual firewall built on the physical node equipment is used for performing access control in different security domains; and the virtual switch built on the physical node equipment is used for carrying out communication service between the physical node equipment and other physical node equipment. According to the invention, a security management and control mechanism with a network access layer, a convergence layer and a core layer is constructed through the established virtual network bridge, virtual switch and virtual firewall, multi-dimensional depth management and control of the network target range are realized, and convenience is provided for large-scale resource and complex network access. The invention further provides a network shooting range security control method.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a security management and control system and method for a network shooting range. Background technique [0002] Network shooting range is a technology or product that simulates and reproduces the network architecture, system equipment, business process operating status and operating environment in real cyberspace based on virtualization technology. Cyber ​​shooting ranges have become an essential cyberspace security core infrastructure for countries to conduct cyberspace security research, learning, testing, verification, and drills. All countries in the world attach great importance to the construction of cyber shooting ranges and regard it as an important means of supporting security capacity building. [0003] Network security is the basic capability of the cyber range platform. Business scenarios, basic applications, user behaviors, data collection and an...

AI Technical Summary

Problems solved by technology

[0004] In an existing network isolation solution for a network shooting range, the isolation and control of the network are realized by processing the monitored Address Resolution Protocol (ARP) packets, multicast or broadcast packets. However, due to the ARP The second layer wrapped in the TCP / IP protocol can only be used as the original method of network security access, with obvious defects, it cannot be applied to the environment of thousands / tens of thousands of virtual machines, it does not have good scalability, and it cannot Unable to achieve deep application

[0005] It can be seen that the existing technical solutions cannot meet the flexible management and control in the case of multi-resource access, cannot realize multi-level network security access management and control, and cannot realize high-level network security access management and control, that is, cannot guarantee large-scale resources and Access to complex networks

Images