基于Docker的网络安全靶场设计与实现

为进一步提高铁路职工网络安全意识和攻防技能水平，文章采用Docker Swarm集群和动态独立靶机技术，设计网络安全靶场。该靶场具有快速部署、快速恢复、易扩容的特点，可用于日常的网络安全学习、竞赛及仿真环境渗透测试，已在中国铁路兰州局集团有限公司上线使用。使用结果表明，该靶场在培养铁路站段网络安全人才、提升铁路网络安全“人防”水平等方面发挥了重要作用。

Network security shooting range based on Docker

In order to further improve the network security awareness and attack and defense skills of railway workers, this paper used Docker Swarm cluster and dynamic independent target technology to design a network security shooting range. The shooting range was characterized by rapid deployment, rapid recovery and easy expansion. It can be used for daily network security learning, competition and simulation environment penetration testing, and has been put into use in China Railway Lanzhou Group Co. Ltd. The application results show that the shooting range has played an important role in training network security talents in railway stations and depots and improving the level of "civil air defense" of railway network security.