A Research of Virtual Training Environment for Information Security

• Main Authors: Chih-Sheng Gao, 高志勝
• Other Authors: Chiang-Lung Liu
• Format: Others
• Language: zh-TW
• Published: 2009
• Online Access: http://ndltd.ncl.edu.tw/handle/81880184669670443091

碩士 === 國防大學理工學院 === 資訊科學碩士班 === 97 === Information security training is an urgent issue either in the enterprise or the military communities. The hand-on experiments performed in a virtual environment are especially crucial to information security learning. Using virtual machines to build an information security training environment can not only provide with a convenient, safe, and realistic training environment, but also reduce the building cost and manpower. Therefore, using virtualization technology to perform information security training has become an important trend. This thesis proposes a virtual training environment framework that can allow multiple users to perform the same experiments simultaneously under the constraint of limited cost. The proposed virtual training environment uses a control server to provide with a remote control tunnel that allows users to remotely control virtual machines and simultaneously perform the same experiments via browser-based interfaces. Moreover, the proposed training environment uses virtual switches to connect virtual machines to form stand-alone training environments so that the experiment each use performs will not interfere with each other. To ensure the security of experiments, the proposed virtual training environment also combines with hardware and software firewall to make sure that the virtual-machine servers and the working virtual machines cannot connect with the real network. To prove the effectiveness of the proposed virtual training environment, we realize the proposed virtual training environment and let multiple users log on to perform the same information security experiments simultaneously. Experimental results show that the proposed virtual training environment framework do allow multiple uses to perform the same experiments simultaneously without interfering with each other. Experimental results also show that the real network will not be affected by the working experiments performed in the proposed virtual training environment. Therefore, the proposed virtual training environment framework can meet the requirement of safe, convenient, and stand-alone training environment, and can be the reference of constructing large-scale information security training environment for enterprise or military industry under the constraint of limited cost enterprise.