Network security course training platform

Abstract

The invention discloses a network security course practical training platform, and belongs to the technical field of network security practical training. Comprising six subsystems, namely a virtual network environment creation module, an operating system simulation module, a safety equipment simulation module, a network attack and defense simulation module, an experiment management and evaluation module and a teaching resource integration module, the virtual network environment creating module is responsible for creating a virtual network topology structure comprising a router, a switch, a server, a firewall and terminal equipment. By providing a comprehensive and real practical training environment, students can master the network security technology in practice, the manipulative ability of the students and the ability of solving practical problems are improved, the interest and understanding of the students in network security courses are enhanced, the experiment content can be flexibly adjusted and customized according to different teaching requirements and student levels, and the practical training efficiency is improved. The method is suitable for different levels of network security courses.

Description

Technical Field

[0001] The present invention belongs to the technical field of network security training, and particularly relates to a training platform for network security courses. Background Art

[0002] With the development of Internet technology, the demand gap for information technology talents is huge in more and more industries. The popularization of information technology requires a large number of skilled talents who understand information technology. At present, in addition to undertaking the research projects of teachers and researchers, the network training room also has to undertake the teaching and training tasks for three types of people, namely: in-school students; entrusted further training for external cooperation and counterpart units; people outside the school who have a strong thirst for knowledge about network but suffer from the lack of training environment. The training platform for network security courses is a software system or online service platform specifically used for network security teaching practice, which provides a series of tools and resources to help students better understand and master network security knowledge and skills.

[0003] The existing computer network application majors in schools mainly adopt traditional teaching methods, which tend to focus more on theoretical teaching. The curriculum system for theoretical teaching is relatively complete, but the training and experimental teaching environment is lacking, the content is relatively small, and there is no scientific and systematic experimental system. The theoretical knowledge mastered by school teachers and students cannot be flexibly applied. In theoretical teaching and experimental training, not only do teachers and students need to have a solid foundation of theoretical knowledge, but also experimental training in the daily real environment is required. Summary of the Invention

[0004] The technical problem to be solved by the present invention is to overcome the above-mentioned disadvantages of the prior art and provide a training platform for network security courses.

[0005] The technical solution adopted to solve the above technical problem is: The training platform for network security courses includes six subsystems, namely, a virtual network environment creation module, an operating system simulation module, a security device simulation module, a network attack and defense simulation module, an experiment management and evaluation module, and a teaching resource integration module. The virtual network environment creation module is responsible for creating a virtual network topology structure including routers, switches, servers, firewalls, and terminal devices; the operating system simulation module is responsible for providing virtual images of multiple operating systems; the security device simulation module is responsible for simulating common network security devices; the network attack and defense simulation module is responsible for integrating multiple network attack tools; the experiment management and evaluation module is responsible for providing experimental courses; the teaching resource integration module is responsible for providing a large number of actual network security cases, including detailed analysis of the cases.

[0006] Furthermore, the virtual network environment creation module supports the creation of custom network topologies. Users can set the attributes of network devices through a graphical interface and text configuration methods. Users can simulate network protocols including TCP / IP, UDP, and ICMP to ensure the authenticity and diversity of the network environment.

[0007] Furthermore, the operating system simulation module allows users to perform system security configurations on the virtual operating system and supports real-time viewing of the operating status of the operating system. The security device simulation module is responsible for users to configure and manage security devices on the simulated devices and enables users to perform performance tests and evaluations on the simulated security devices.

[0008] Furthermore, the network attack and defense simulation module provides corresponding defense tools and technologies and supports detailed recording and analysis of the attack and defense processes. The experiment management and evaluation module includes functions such as experiment course setting, experiment operation evaluation, and experiment feedback. The experiment management and evaluation module supports the mutual switching function between the normal mode and the teaching mode. When the user clicks on the normal mode, the platform supports displaying all experiment modules and experiment courses; when the user switches to the teaching mode, the user must select different course schedules to view the course content designed by the teaching plan and cannot view other courses except for this teaching plan; it supports viewing the planned courses by selecting different date ranges and teaching plans of different administrators; the dates with teaching plans are intuitively displayed in the form of a calendar; the teaching mode supports displaying the teaching plan name, target period, teaching introduction, etc.; it supports a shortcut key to jump to today's teaching plan.

[0009] Furthermore, the teaching resource integration module includes network security theory knowledge documents, case analyses, and an online communication platform. The network security course training platform is customizable and extensible, and can adjust the experimental content and add new security technologies according to different teaching needs. The network security course training platform is based on the B / S architecture and provides services and management for both experimental machines and courseware resource libraries, and supports real-time monitoring of experimental machines and system resources.

[0010] Furthermore, the network attack and defense simulation module includes a competition system that automatically monitors the competition flags submitted by trainees and real-time displays the competition questions and competition results.

[0011] Furthermore, the automatic detection of the competition flags submitted by trainees includes the following specific formula:

[0012] Score calculation formula:

[0013] S = m × S c -(n - m)S i

[0014] Where S is the total score, m is the number of correct answers, S c is the score that can be obtained for correctly submitting the flag, n is the total number of questions answered, S i is the score deducted for wrong answers;

[0015] Ranking calculation:

[0016] The scores of each student are stored in the array S = [s 1 , s 2 , s 3 , …, s k ;

[0017] For the ranking r of the i-th contestant i can be expressed as:

[0018]

[0019] where, [s j > s i is an indicator function, if s j > s i then it is 1, otherwise it is 0;

[0020] When there are equal scores, first sort the scores in descending order, and then calculate the ranking;

[0021] Let the sorted score array be S′ = [s′ 1 , s′ 2 , s′ 3 , …, s′ 1 , use the following formula:

[0022]

[0023] Finally, store the rankings of the students in the array R = [r 1 , r 2 , r 3 , …, r k .

[0024] The beneficial effects of the present invention are as follows: By providing a comprehensive and real training environment, students can master network security technologies in practice, improve their hands-on ability and the ability to solve practical problems, enhance students' interest and understanding of network security courses, and can flexibly adjust and customize experimental content according to different teaching needs and student levels, and is applicable to network security courses at different levels, from basic network security introductory courses to advanced network attack and defense actual combat courses. At the same time, the scalability of the platform allows new network security technologies and tools to be continuously introduced, enabling teachers and students to keep up with the development of the network security field and promoting the update of network security knowledge and technological innovation. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 It is the platform architecture diagram of the present invention. Detailed implementation manners

[0026] In order to make the objectives, technical solutions and advantages of the present invention clearer and more understandable, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0027] As Figure 1 shown, the network security course training platform of this embodiment includes six subsystems: a virtual network environment creation module, an operating system simulation module, a security device simulation module, a network attack and defense simulation module, an experiment management and evaluation module, and a teaching resource integration module. The virtual network environment creation module is responsible for creating a virtual network topology structure including routers, switches, servers, firewalls, and terminal devices; the operating system simulation module is responsible for providing virtual images of multiple operating systems; the security device simulation module is responsible for simulating common network security devices; the network attack and defense simulation module is responsible for integrating multiple network attack tools; the experiment management and evaluation module is responsible for providing experimental courses; the teaching resource integration module is responsible for providing a large number of actual network security cases, including detailed analysis of the cases.

[0028] The virtual network environment creation module supports the creation of a custom network topology. Users can set the attributes of network devices through a graphical interface and text configuration method. Users can simulate network protocols including TCP / IP, UDP, and ICMP to ensure the authenticity and diversity of the network environment.

[0029] The operating system simulation module allows users to perform system security configuration on a virtual operating system and supports real-time viewing of the operating status of the operating system. The security device simulation module is responsible for users to perform configuration and management operations on simulated devices and enables users to perform performance testing and evaluation on the simulated security devices.

[0030] The network attack and defense simulation module provides corresponding defense tools and technologies, and supports detailed recording and analysis of the attack and defense processes. The experiment management and evaluation module includes functions such as experimental course setting, experimental operation evaluation, and experimental feedback. The experiment management and evaluation module supports the mutual switching function between the normal mode and the teaching mode. When the user clicks on the normal mode, the platform supports displaying all experimental modules and experimental courses; when the user switches to the teaching mode, the user must select different course schedules to view the course content designed in the teaching plan, and cannot view other courses except for this teaching plan; it supports viewing the planned courses by selecting different date ranges and teaching plans of different administrators; the dates with teaching plans are intuitively displayed in the form of a calendar; the teaching mode supports displaying the teaching plan name, target period, teaching introduction, etc.; it supports a shortcut key to jump to today's teaching plan.

[0031] The teaching resource integration module includes network security theory knowledge documents, case analyses, and an online communication platform. The network security course training platform is customizable and extensible, and can adjust experimental content and add new security technologies according to different teaching requirements. The network security course training platform is based on the B / S architecture and provides services and management for both experimental machines and courseware resource libraries, and supports real-time monitoring of experimental machines and system resources. The network attack and defense simulation module includes a competition system that automatically monitors the competition flags submitted by trainees and real-time displays the competition questions and competition results.

[0032] The automatic detection of the competition flags submitted by trainees includes the following specific formula:

[0033] Score calculation formula:

[0034] S = m × S c -(n - m)S i

[0035] Where S is the total score, m is the number of correct times, S c is the score that can be obtained for correctly submitting a flag, n is the total number of questions answered, and S i is the score deducted for wrong answers;

[0036] Ranking calculation:

[0037] The scores of each trainee are stored in the array S = [s 1 , s 2 , s 3 , …, s k ;

[0038] For the ranking r i of the i-th contestant, it can be expressed as:

[0039]

[0040] Among them, j >s i is an indicator function. If s j >s i then it is 1, otherwise it is 0;

[0041] When there are equal scores, first sort the scores in descending order, and then calculate the rankings;

[0042] Let the sorted score array be S′ = [s′ 1 , s′ 2 , s′ 3 , …, s′ 1 . Use the following formula:

[0043]

[0044] Finally, store the rankings of the students in the array R = [r 1 , r 2 , r 3 , …, r k .

[0045] The above is only a preferred embodiment of the present invention and is not used to limit the protection scope of the present invention.

Claims

1. The network security course training platform is characterized by: It includes six subsystems: virtual network environment creation module, operating system simulation module, security device simulation module, network attack and defense simulation module, experiment management and evaluation module and teaching resource integration module. The virtual network environment creation module is responsible for creating a virtual network topology including routers, switches, servers, firewalls and terminal devices; the operating system simulation module is responsible for providing virtual images of various operating systems; the security device simulation module is responsible for simulating common network security devices; the network attack and defense simulation module is responsible for integrating various network attack tools; the experiment management and evaluation module is responsible for providing experimental courses; the teaching resource integration module is responsible for providing a large number of actual network security cases, including detailed analysis of the cases.

2. The network security course training platform according to claim 1 is characterized in that: The virtual network environment creation module supports the creation of custom network topologies. Users can set the properties of network devices through a graphical interface and text configuration. Users can simulate network protocols including TCP / IP, UDP, and ICMP to ensure the authenticity and diversity of the network environment.

3. The network security course training platform according to claim 1 is characterized in that: The operating system simulation module allows users to perform system security configuration on the virtual operating system and supports real-time viewing of the operating system's running status. The security device simulation module is responsible for users to configure and manage security devices on simulated devices, and allows users to perform performance testing and evaluation on simulated security devices.

4. The network security course training platform according to claim 1 is characterized in that: The network attack and defense simulation module provides corresponding defense tools and technologies, and supports detailed recording and analysis of the attack and defense process. The experiment management and evaluation module includes the experiment course setting, experiment operation evaluation and experiment feedback functions. The experiment management and evaluation module supports the switching function between the normal mode and the teaching mode. When the user clicks the normal mode, the platform supports the display of all experiment modules and experiment courses; when the user switches to the teaching mode, the user must select a different course schedule to view the course content designed by the teaching plan, and cannot view other courses except the teaching plan; Supports selecting different date intervals and teaching plans of different administrators to view planned courses; dates with teaching plans are intuitively displayed in the form of a calendar chart; teaching mode supports displaying teaching plan names, target periods, teaching introductions, etc.; Supports shortcut keys for jumping to today's teaching plan.

5. The network security course training platform according to claim 1 is characterized in that: The teaching resource integration module includes network security theoretical knowledge documents, case analysis and online communication platform. The network security course training platform is customizable and scalable, and can adjust the experimental content and add new security technologies according to different teaching needs. The network security course training platform is based on the B / S architecture and provides services and management for the experimental machine and courseware resource library at the same time, and supports real-time monitoring of the experimental machine and system resources.

6. The network security course training platform according to claim 1, characterized in that: The network attack and defense simulation module includes a competition system that automatically monitors the competition flags submitted by students and displays the competition topics and results in real time.

7. The network security course training platform according to claim 6, characterized in that: The automatic detection of the competition flag submitted by the students includes the following specific formula: Score calculation formula: S=m×S c -(n-m)S i Where S is the total score, m is the number of correct times, S c The score you can get by submitting the flag correctly, n is the total number of answers, S i Points deducted for incorrect answers; Ranking calculation: The score of each student is stored in the array S = [s1, s2, s3, ..., s k ]middle; For the ith player, the ranking r i It can be expressed as: Among them, [s j >s i ] is an indicator function, if s j >s i If yes, it is 1, otherwise it is 0; When there are equal scores, the scores are sorted in descending order first, and then the ranking is calculated; Assume that the sorted score array is S′=[s′1, s′2, s′3, …, s′1] and use the following formula: Finally, the ranking of the students is stored in the array R = [r1, r2, r3, ..., r k ]middle.

Images