Journal of Information Security Reserach ›› 2021, Vol. 7 ›› Issue (E1): 98-.

Previous Articles     Next Articles

Twins Emulation Cyber Range Based on Cyber Physical Domain Fusion

  

  • Online:2022-04-20 Published:2022-04-22

信息域与物理域融合的孪生仿真网络靶场

郑轶;胡志锋;王路路;蒋志强   

  1. (博智安全科技股份有限公司南京210012)
  • 通讯作者: 郑轶 硕士,高级工程师.主要研究方向为信息安全、网络通信、计算机应用. zhengyi@elextec.com
  • 作者简介:郑轶 硕士,高级工程师.主要研究方向为信息安全、网络通信、计算机应用. zhengyi@elextec.com 胡志锋 硕士,高级工程师.主要研究方向为计算机软件架构、计算机信息系统安全、网络通信、控制自动化系统. huzhifeng@elextec.com 王路路 硕士,工程师.主要研究方向为工业互联网安全、网络攻防演训、主动防御等. wanglulu@elextec.com 蒋志强 硕士,工程师.主要研究方向为网络通信安全、网络攻防技术、网络虚拟化技术. jiangzhiqiang@elextec.com

Abstract: Twins Emulation Cyber range based on CyberPhysical domain fusion is a cyber security application service platform, based on digital twins technology, virtualization technology to carry out digital emulation of the cyber and physical domain of the target system, it uses the software definition hierarchical architecture to decouple software logic and hardware resources, and gives it software definition capability. It can be flexibly constructed and deployed through scenario definition, application definition, network definition, system definition and vulnerability definition, covering the whole industry scenario, the whole industry element, the whole domain space and the whole security element, providing security research, innovation incubation, simulation experiment, attack and defense drill, talent training and evaluation and certification services.

Key words: cyber range, twins emulation virtualization, industrial control system, telecommunications network, elastic orchestration, coordinated attack chain, evaluation

摘要: 信息域与物理域融合的孪生仿真网络靶场是一种基于数字孪生技术、虚拟化技术对目标系统信息域和物理域进行数字模拟仿真,采用软件定义层次化架构将软件逻辑与硬件资源充分解耦,赋予软件定义能力,通过场景定义、应用定义、网络定义、系统定义、漏洞定义灵活构建与部署覆盖全行业场景、全产业要素、全领域空间、全安全要素的网络安全应用服务平台,提供安全研究、创新孵化、仿真实验、攻防演练、人才培训和测评认证等安全服务.

关键词: 网络靶场, 孪生仿真虚拟化, 工业控制系统, 电信网络, 弹性编排, 协同攻击链, 效果评估