关键词: 装备网络安全靶场, 网络安全, 架构设计, 能力框架, 安全能力试验, 抗攻击试验, 网络攻防训练

Abstract:

Following the construction experience of the USA cyber range，this paper describes the target and the capacity of the range architecture on the basis of analyzing the current domestic situation on internal cyber range. Five key technologies involving the construction of the range are analyzed. The compositions and functions are designed on principles of unified planning，advanced technology，versatility and extensibility. According to the actual demand and resource status，the technologies of cloud and virtualization are adopted to design for the equipment network security range hierarchically. The interfaces of simulated and real equipment are reserved for the demand of all kinds of tests.

Key words: equipment network security range, network security, architecture design, capacity framework, security capacity test, anti-attack test, network attack and defense training