Design and Implementation of a Cyber Rang with Emulated Network Security Devices

When universities conduct network attack and defence experiments, window, Linux systems and vulnerable applications are simulated in the Cyber Security Range, while the simulation of network security devices is missing. As a result, the experimental process is quite different from the process in the real production environment. EVE-NG (Emulated Virtual Environment) is an emerging virtual simulation platform that incorporates Dynamips, IOL, and QEMU simulation technologies. Based on the EVE-NG platform, this paper not only simulates network security hardware devices such as firewall, web firewall, logging platform, but also builds an infrastructure environment for network attack and defence. Based on this environment, a complete network attack and defence experimental environment can be constructed by adding various host systems with vulnerabilities, applications, and even vulnhub target machines. Using the method in this paper, the experimental environment can be established by using a highly configured computer without purchasing any hardware security device, which reduces the cost of establishing a laboratory. In addition, this kind of Cyber Security Range is closer to the real production environment, which is conducive to improving students' network attack and defence skills.