面向虚实互联网络的链路采集技术研究

doi:10.16182/j.issn1004731x.joss.18-0218

系统仿真学报 ›› 2020, Vol. 32 ›› Issue (3): 421-429.doi: 10.16182/j.issn1004731x.joss.18-0218

• 仿真支撑平台/系统技术 • 上一篇下一篇

面向虚实互联网络的链路采集技术研究

刘渊¹, 冯兴兵¹, 王晓锋², 邓赵红¹

1. 江南大学数字媒体学院,江苏无锡 214122;
2. 江南大学物联网工程学院,江苏无锡 214122

收稿日期:2018-04-16 修回日期:2018-07-19 出版日期:2020-03-18 发布日期:2020-03-25
作者简介:刘渊(1967-),男,江苏无锡,硕士,教授,研究方向为网络安全;冯兴兵(1992-),女,河北邢台,硕士生,研究方向为网络仿真,数据采集。
基金资助:
国家重点研发计划(2016YFB0800803),国家自然科学基金(61672264)

Research of Link Acquisition Technology for Virtual-reality Network

Liu Yuan¹, Feng Xingbing¹, Wang Xiaofeng², Deng Zhaohong¹

1. School of Digital Media Institute, Jiangnan University, Wuxi 214122, China;
2. School of Internet of Things Engineering, Jiangnan University, Wuxi 214122, China

Received:2018-04-16 Revised:2018-07-19 Online:2020-03-18 Published:2020-03-25

摘要/Abstract

摘要： 网络仿真是网络空间靶场的重要基础,面向仿真网络的数据采集与评估是关键环节。基于OpenStack复现形成的仿真网络,构建面向多样化仿真链路的分布式链路数据采集系统。研究面向宿主机内、间的虚拟链路和虚实互联等3类链路的协同采集技术、高效链路数据采集技术以及基于链路数据的效果评估技术。实验表明:所提方法在采集速率上相对于传统方法提升了88.48%,在CPU占用率上降低了45.29%;面向典型的LDDoS场景,可采集所需要的链路数据,并进行LDDoS的效果评估。

关键词: 网络仿真, 链路数据采集, 效果评估, 网安试验

Abstract: Network simulation is an important foundation for the cyberspace shooting range, where the data acquisition and evaluation for the emulation network is its key link. Based on the emulation network formed by OpenStack, a distributed link data acquisition system for the diversified emulation links is constructed. The paper studies the collaborative acquisition technology and the efficient link data acquisition technology of 3 kinds of links, such as the virtual link in the host, the virtual link between the host and the virtual-reality link, and the evaluation technology based on the link data. Experiments show that the proposed method improves the acquisition rate by 88.48% compared with the traditional method, and reduces the CPU usage by 45.29%. For a typical LDDoS scenario, the proposed method can collect the required link data and evaluate the effect of LDDoS.

Key words: network emulation, link data acquisition, effect evaluation, network security test

中图分类号:

TP393.08

刘渊, 冯兴兵, 王晓锋, 邓赵红. 面向虚实互联网络的链路采集技术研究[J]. 系统仿真学报, 2020, 32(3): 421-429.

Liu Yuan, Feng Xingbing, Wang Xiaofeng, Deng Zhaohong. Research of Link Acquisition Technology for Virtual-reality Network[J]. Journal of System Simulation, 2020, 32(3): 421-429.

参考文献

[1] 方滨兴, 贾焰, 李爱平, 等. 网络空间靶场技术研究[J]. 信息安全学报, 2016, 1(3): 1-9.
Fang Binxing, Jia Yan, Li Aiping, et al.Research on Network Space Shooting Range Technology[J]. Journal of Cyber Security, 2016, 1(3): 1-9.
[2] Murat K, Arjan D.Quality of Service (QoS) in Software Defined Networking (SDN): A Survey[J]. Journal of Network and Computer Applications (S1084-8045), 2017, 80: 200-218.
[3] 李伯虎, 柴旭东, 侯宝存, 等. 一种基于云计算理念的网络化建模与仿真平台—“云仿真平台”[J]. 系统仿真学报, 2009, 21(17): 5292-5299.
Li Bohu, Chai Xudong, Hou Baocun, et al.A Networked Modeling and Simulation Platform Based on Cloud Computing Concept-“Cloud Simulation Platform”[J]. Journal of System Simulation, 2009, 21(17): 5292-5299.
[4] 张南. 系统链路数据采集技术研究[D]. 沈阳: 沈阳理工大学, 2009.
Zhang Nan.Research on System Link Data Acquisition Technology [D]. Shenyang: Shenyang Ligong University, 2009.
[5] Chwala C, Keis F, Kunstmann H.Real-time Data Acquisition of Commercial Microwave Link Networks for Hydrometeorological Applications[J]. Atmospheric Measurement Techniques (S1867-1381), 2016, 8(11): 12243-12262.
[6] 刘小威, 陈蜀宇, 卢尧, 等. 零拷贝技术在网络分析工具中的应用[J]. 计算机系统应用, 2012, 21(4): 169-173.
Liu Xiaowei, Chen Shuyu, Lu Yao, et al.Application of Zero Copy Technology in Network Analysis Tools[J]. Computer Systemsand Applications, 2012, 21(4): 169-173.
[7] 支连意. 云环境中集群监控数据采集与分析系统的研究与实现[D]. 南京: 东南大学, 2016.
Zhi Lianyi.Research and Implementation of Cluster Monitoring Data Acquisition and Analysis System in Cloud Environment [D]. Nanjing: Southeast University, 2016.
[8] 孙福全. 云计算环境中用量信息采集系统的设计与实现[D]. 北京: 北京邮电大学, 2013.
Sun Fuquan.Design and Implementation of Consumption Information Collection System in Cloud Computing Environment [D]. Beijing: Beijing University of Posts and Telecommunications, 2013.
[9] 张义荣, 鲜明, 王国玉. 一种基于网络熵的计算机网络攻击效果定量评估方法[J]. 通信学报, 2004, 25(11): 158-165.
Zhang Yirong, Xian Ming, Wang Guoyu.A Quantitative Evaluation Method of Computer Network Attack Effect Based on Network Entropy[J].Journal on Communications, 2004, 25(11): 158-165.
[10] 陈秀真, 郑庆华, 管晓宏, 等. 层次化网络安全威胁态势量化评估方法[J]. 软件学报, 2006, 17(4): 885-897.
Chen Xiuzhen, Zheng Qinghua, Guan Xiaohong, et al.Quantitative Evaluation Method of Hierarchical Cyber Security Threat Situation[J]. Journal of Software, 2006, 17(4): 885-897.
[11] Li L G.Study of Multimedia Teaching Effect Evaluation Based on AHP[J]. Energy Procedia (S1876-6102), 2011, 13: 8371-8375.
[12] Mendiola A, Fuentes V, Matias J, et al.An Architecture for Dynamic QoS Management at Layer 2 for DOCSIS Access Networks Using OpenFlow[J]. Computer Networks (S1389-1286), 2016, 94: 112-128.
[13] 胡显成, 任新, 向涛. 网络端口镜像获取流量分析数据源[C]. 中国计算机用户协会网络应用分会2013年网络新技术与应用年会. 2013: 212-214.
Hu Xiancheng, Ren Xin, Xiang Tao.Port Mirroring for Traffic Analysis Data Sources[C]. China Computer User Association Network Application Branch 2013 Network New Technology and Application Annual Meeting. 2013: 212-214.
[14] Rizzo L, Landi M.Netmap[J]. ACM SIGCOMM Computer Communication Review (S0146-4833), 2011, 41(4): 339-350.
[15] 张潇晓, 唐勇, 苏金树, 等. 网络流量分析系统的设计与实现[J]. 计算机应用, 2011, 31(增2): 25-28.
Zhang Xiaoxiao, Tang Yong, Su Jinshu, et al.Design and Implementation of Network Traffic Analysis System[J]. Journal of Computer Applications, 2011, 31(S2): 25-28.
[16] Sapegin A, Uhlig S.On the Extent of Correlation in BGP Updates in the Internet and What It Tells Us About Locality of BGP Routing Events[J]. Computer Communications (S0140-3664), 2013, 36(15/16): 1592-1605.
[17] 黎松,诸葛建伟, 李星. BGP安全研究[J]. 软件学报, 2013, 24(1): 121-138.
Li Song, Zhuge Jianwei, Li Xing.Research on BGP Security[J]. Journal of Software, 2013, 24(1): 121-138.
[18] 郑庆棠. 基于仿真平台的典型动态路由协议攻击技术研究[D]. 北京: 北京邮电大学, 2014.
Zheng Qingtang.Research on Typical Dynamic Routing Protocol Attack Technology Based on Simulation Platform[D]. Beijing: Beijing University of Posts and Telecommunications, 2014.

面向虚实互联网络的链路采集技术研究

Research of Link Acquisition Technology for Virtual-reality Network

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 9

编辑推荐

Metrics

本文评价

[1]	王晓锋, 陈阳, 张光杰, 陈建宇. 面向网络仿真拓扑的多目标优化映射方法[J]. 系统仿真学报, 2020, 32(8): 1436-1445.
[2]	刘渊, 邱常伶, 王晓锋, 蒋敏. 面向多尺度融合网络仿真的拓扑映射方法研究[J]. 系统仿真学报, 2019, 31(10): 2030-2041.
[3]	刘立芳, 赵丽莎, 齐小刚, 熊伟. 基于排队模型的网络性能仿真与安全评估技术[J]. 系统仿真学报, 2018, 30(1): 191-196.
[4]	傅妍芳, 李路, 高祥, 程兵. 基于TDMA的卫星战术通信网路由协议仿真研究[J]. 系统仿真学报, 2016, 28(2): 467-475.
[5]	刘宴涛, 徐静, 夏桂阳, 秦娜. 一种基于OPNET的CAN总线仿真系统[J]. 系统仿真学报, 2016, 28(11): 2692-2700.
[6]	刘小虎, 张玉臣, 方青坡, 孙磊刚. 半实物网络仿真动态路由方案设计与实现[J]. 系统仿真学报, 2015, 27(9): 2089-2095.
[7]	傅妍芳, 高祥, 程兵, 冯雪徭. 基于VMotion的通信网仿真系统的热迁移调度算法研究[J]. 系统仿真学报, 2015, 27(8): 1721-1728.
[8]	唐红, 杨广, 徐川, 唐文广. 面向性能评估的3G应急通信网络仿真系统研究[J]. 系统仿真学报, 2015, 27(2): 303-312.
[9]	张明清, 孙磊刚, 孔红山, 齐先庆. 基于共享库集成的半实物网络仿真方法研究[J]. 系统仿真学报, 2015, 27(11): 2695-2700.