基于虚拟化的轻量级背景流量节点生成及部署算法研究

摘要

进行了网络攻防分析,针对传统的背景流量模拟技术在生成及部署方面存在背景流量大小受限、背景流量真实性不足、背景流量生成工具部署的数量和位置受限的问题,提出了一种基于虚拟化的轻量级背景流量节点生成及部署算法,该算法是一种基于资源量的目标流量映射、基于最短路由的背景流量应用添加、基于最少通信代价的节点映射的三阶段算法,解决了背景流量节点在网络攻防实验中大规模快速生成及灵活部署的问题.实验结果表明,使用轻量级背景流量节点,生成的背景流量满足网络自相似性,资源消耗小、启动速度快,并且可根据实际网络攻防实验的需求进行动态、灵活、快速的大规模部署.%The analysis of network attack and defense was conducted,and aiming at the traditional background traffic simulation technology's problems in generation and deployment of traffic nodes such as size limitation of background traffic,authenticity limitation of background traffic,and number and position limitations of the tools for background traffic generation and deployment,an algorithm for generation and deployment of lightweight background traffic nodes based on virtualization was proposed.This is a three-phase algorithm that consists of the target traffic mapping based on resource amount,the adding of background traffic application based on the shortest route,and the node mapping based on the least communication cost,aiming to solve the problems of massive,rapid generation of background traffic nodes and flexible deployment of them in network attack and defense experiments.The experimental results show that using the proposed lightweight background traffic nodes to generate the background traffic can satisfy the self-similarity of networks,the small consumption of resource,the fast starting speed,and the massive,flexible and quick deployment according to the actual network attack and defense experiment.