用于智能能源系统的模块化网络靶场平台
A Modular Cyber Range Platform for Smart Energy Systems
浏览论文内容
中文总结 AI 辅助
本文针对智能能源系统,介绍一种轻量级模块化网络靶场平台,以FastAPI为后端、QEMU/KVM虚拟化技术构建,能自动部署复杂网络。通过光伏电站场景展示其能力,支持工业协议,含“绿色团队”框架,描述了系统多方面特性。
中文摘要 AI 辅助
现代关键基础设施需要能弥合数字漏洞与物理后果之间差距的现实训练工具。本文介绍了一种轻量级、模块化的网络靶场(CR),旨在高保真模拟信息技术(IT)和运营技术(OT)环境。该平台以FastAPI框架为后端,采用基于QEMU/KVM的虚拟化技术,利用基于YAML的引擎在标准硬件上自动部署复杂网络且开销最小。通过一个虚构智慧城市中的光伏电站场景展示其能力,该场景包含多阶段攻击。此CR原生支持Modbus/TCP和MQTT等工业协议,还包括用于评估危机情况下人员表现的“绿色团队”框架。本文描述了系统架构、自动设置、协议模拟能力和场景设计。
英文摘要
Modern critical infrastructure requires realistic training tools that bridge the gap between digital vulnerabilities and physical consequences. This paper introduces a lightweight, modular Cyber Range (CR) designed to simulate Information Technology (IT) and Operational Technology (OT) environments with high fidelity. Using the FastAPI framework as backend and Quick Emulator (QEMU)/Kernel-based Virtual Machine (KVM) virtualisation, the platform employs a YAML-based engine to automatically deploy complex networks on standard hardware with minimal overhead. To demonstrate its capabilities, we present a Photovoltaic (PV) Plant scenario set in a fictional smart city. The scenario follows a multi-stage attack that begins with the compromise of a home Internet of Things (IoT) device and escalates into a major power outage at a military base. The proposed CR, natively supports industrial protocols such as Modbus/TCP and Message Queuing Telemetry Transport (MQTT) and includes a "Green Team" framework for evaluating human performance during crisis situations. This paper describes the system architecture, automated setup, protocol-simulation capabilities, and scenario design.