Abstract:Network emulation is an important method to verify the effectiveness and reliability of the space-ground integrated information network security technology.Facing various malicious user behaviors in the space-ground integrated information network,this paper studies the high fidelity and high concurrency malicious user behavior emulation technology based on cloud platform,and focuses on the broadband malicious user behavior and narrow-band malicious user behavior emulation technology based on real traffic replay,including two-way traffic replay technology driven by real time series and high concurrent traffic generation technology implemented by distributed multi-node cooperative operation and control.The emulation system of the space-ground integrated network with six space-based backbone satellites and 66 low-orbit satellite constellations is constructed.The experimental verification of the malicious user behavior emulation technology proposed in the paper shows that the emulation technology can realize the diversification of malicious user behaviors emulation,and the emulation concurrency amount is up to 10000 strips per second,which can effectively meet the requirements of the security evaluation of the space-ground integrated information network.In addition,the proposed two-way malicious traffic replay technology in this paper has the advantage of high fidelity in time series compared with traditional methods.