基于SDN架构的网络空间安全实验教学设计

Design and Implementation of Cyberspace Security ExperimentBased on SDN

  • 摘要: 软件定义网络(SDN)是一种新型网络创新架构,具有控制逻辑集中和网络可编程化的特性,为应用创新提供了可定义的网络平台。为快速简易地开展网络空间安全的课程实验,该文基于SDN架构,以Mininet为轻量级实验平台,结合Python语言编程和Linux简单命令行操作,设计了网络空间安全经典实验教学方案。以边界网关协议(BGP)路径挟持和地址解析协议(ARP)攻防实验为例,介绍了新型网络创新架构软件定义网络(SDN),展示了实验平台的网络拓扑配置、路由配置和用户交互流程。该实验有助于提升学生对网络空间安全的理解,培养学生的创新意识和应用实践能力。

     

    Abstract: Software Defined Network(SDN)is a new type of networking paradigm with the characteristics of centralized control and network programmability,which provides a definable network platform for application innovation.In order to carry out the cyberspace security course experiment in a quick and convenient way,a network security classic experiment teaching program which was based on SDN architecture is designed and implemented with Mininet as the light-weighted experimental platform.The test program is combined with Python language programming and the simple command line operation of Linux,designed the classic experimental teaching scheme of network space security.Taking the Border Gateway Protocol(BGP)path carrying and Address Resolution Protocol(ARP)attack and defense experiment as experiment an example,the new network innovation architecture Software Defined Network(SDN)is introduced and the network topology configuration,routing configuration and user interaction process of the experimental platform are displayed.This experiment helps to enhance students' understanding of cyberspace security and cultivate students' innovative consciousness and practical ability.

     

/

返回文章
返回