现代关键基础设施亟需能够弥合数字漏洞与物理后果之间鸿沟的高保真训练工具。本文提出一种轻量级、模块化的网络靶场(Cyber Range, CR),旨在高保真地模拟信息技术(IT)与运行技术(OT)环境。该平台以FastAPI框架为后端,采用Quick Emulator(QEMU)/基于内核的虚拟机(KVM)虚拟化技术,并通过基于YAML的引擎,在标准硬件上以极低开销自动部署复杂网络。为验证其能力,我们构建了一个虚构智能城市中的光伏发电(PV)电站场景:该场景模拟了一起多阶段攻击,起始于家庭物联网(IoT)设备遭入侵,并逐步升级为导致军事基地大规模停电的事件。所提出的CR原生支持Modbus/TCP和消息队列遥测传输(MQTT)等工业协议,并集成“绿队”(Green Team)框架,用于评估人员在危机情境下的响应表现。本文阐述了该系统的整体架构、自动化部署机制、协议仿真能力以及场景设计方法。
Modern critical infrastructure requires realistic training tools that bridge the gap between digital vulnerabilities and physical consequences. This paper introduces a lightweight, modular Cyber Range (CR) designed to simulate Information Technology (IT) and Operational Technology (OT) environments with high fidelity. Using the FastAPI framework as backend and Quick Emulator (QEMU)/Kernel-based Virtual Machine (KVM) virtualisation, the platform employs a YAML-based engine to automatically deploy complex networks on standard hardware with minimal overhead. To demonstrate its capabilities, we present a Photovoltaic (PV) Plant scenario set in a fictional smart city. The scenario follows a multi-stage attack that begins with the compromise of a home Internet of Things (IoT) device and escalates into a major power outage at a military base. The proposed CR, natively supports industrial protocols such as Modbus/TCP and Message Queuing Telemetry Transport (MQTT) and includes a "Green Team" framework for evaluating human performance during crisis situations. This paper describes the system architecture, automated setup, protocol-simulation capabilities, and scenario design.