Summary: | 碩士 === 國立成功大學 === 電腦與通信工程研究所 === 96 === In recent years, the increasingly serious problems of network security occur. It is necessary to establish a dedicated testbed to support its related research. So Taiwan Information Security Center at National Cheng Kung University (TWISC@NCKU)[6] introduced into Emulab system software[50] which developed from University of Utah. In the team's efforts and with reference to their experience of building, we use Emulab system software and locally hardware facility. After process of“Analysis on Software Architecture”,“Planning on Overall Environment”, and“Integration on Hardware and Software”. Finally completed to construct“The New Generation of Network Security Testbed — Testbed@TWISC”[5].
This system can simulate real-world network environment. User can login to the system by remote connection in all of the world. In the use of the above, user can establish host and Network Topology which the experiment needs by Web-GUI interface. Afer finished building the network environment, experiment can be executed right now.
Apart from the introduction of this system, we will cooperate with the hardware vendors to develop“Environmental Monitoring and Management System”[6] and integrate it into Testbed@TWISC. This system can not only monitor the status on overall environment and facilities immediately but also be a great help for the future purchase of facility and systems analysis. In addition to providing users more stable network testing environment in the feature, we want to develop in the following two parts:
(1)In addition to expanding its scale, National Chiao Tung University (NCTU) and Academia Sinica, Republic of China (R.O.C.) are also gradually introducing Emulab system technology. We hope to use IPSec technology[16] to combine three testbeds' resources and building the large-scale experimental network environment which across the Internet just like DETERlab[20].
(2)When Testbed@TWISC system in development to a certain size, we hope that part of the nodes can be added into PlanetLab project. Work together for the next generation Internet development.
In this thesis, we focus on“Planning and Deployment on Overall Environment”. In order to facilitate our future facilities management and expansion, we have to not only accurate assessment at the facilities purchasing and environment where the facilities furnishing, but also satisfy the need for facilities furnishing. This can also be beautiful for the visualization. Besides, in order to monitor the status on overall environment and facilities immediately, we have to integrate“Environmental Monitoring and Management System”[6]. In the final planning for network environment, in order to conform convenience and security for the system in network packet transmission, we divide our system into five Virtual Local Area Network (VLAN).
This system constructs process consists of two parts:“Planning on Overall Environment”and“Integration on Software Aspect”. In this planning, we established Testbed@TWISC. This thesis focus on“Planning on Overall Environment”, and“Integration on Software Aspect”is another one partner — Li-Da Chen of the research direction. The topic of the thesis is“Construction of the New Generation Network Security Testbed — Testbed@TWISC:Integration and Implementation on Software Aspect”[34].
|