CN111949980A - Target client monitoring method and device, storage medium and electronic device - Google Patents

Abstract

The invention discloses a target client monitoring method and device, a storage medium and an electronic device. Wherein, the method includes: acquiring a target log generated during the running of the target client, wherein the target client supports code implantation; and when it is determined according to the target log that there is an external attack on the target client, sending the target code to the target client ;In order to make the target client run the target code to prevent external attacks, in the case of the target client in the edge technology network being attacked, the target code is sent to the target client, so that the target client can run the target code to resist The purpose of external attack is to achieve the technical effect of ensuring the security of the target client and further guaranteeing the security of the edge technology network, thereby solving the technical problem of improving the data security of the edge computing network in the prior art.

Description

Target client monitoring method and device, storage medium and electronic device

technical field

The present invention relates to the field of computers, and in particular, to a target client monitoring method and device, a storage medium and an electronic device.

Background technique

The development of edge computing has reduced the load of cloud computing, and new problems have also been brought about as more core capabilities such as network connections, computing, and storage are assigned to the edge. The first is process monitoring, and more processing occurs at the edge without unified supervision. The second is security. For the access identification algorithm, the security will gradually decrease over time. When the access identification algorithm is cracked, the entire network will be used to provide false data for other clients, thereby affecting the data security of the entire edge computing network.

At present, in order to improve the data security of edge computing networks, existing high-complexity identification and access algorithms are used; such as certificates, signature verification, etc., the security of certificates and signatures lies in the complexity of their algorithms. The content of the certificate is calculated, and the signature algorithm is cracked, which may cause devastating damage to the security of the entire existing client

For the above problems, no effective solution has been proposed yet.

SUMMARY OF THE INVENTION

Embodiments of the present invention provide a target client monitoring method and device, a storage medium, and an electronic device, so as to at least solve the relatively single technical problem in the prior art of improving the data security of an edge computing network.

According to an aspect of the embodiments of the present invention, a method for controlling a target client is provided, including: acquiring a target log generated during the running of a target client, wherein the target client supports code implantation; according to the target When the log determines that there is an external attack on the target client, send the target code to the target client; so that the target client runs the target code to prevent external attacks.

Optionally, before obtaining the target log generated during the operation of the target client, the above method includes: obtaining an access request of the target client, wherein the access request is used to establish a connection with the target client. A communication connection, wherein the access request carries verification information; in the case that the verification information matches the preset verification information, a communication connection with the target client is established.

Optionally, after establishing a communication connection with the target client when the verification information matches the preset verification information, the method further includes: acquiring a target log of the target client; The target log checks the validity of the target client; if the target client does not have validity, cancels the communication connection with the target client.

Optionally, after the acquisition of the target log of the target client, the above method further includes: canceling the communication connection with the target client when it is determined according to the target log that the target client cannot access the network normally. .

Optionally, after obtaining the target log of the target client, the above method further includes: canceling the communication connection with the target client when it is determined according to the target log that the target client has illegal access to the network. .

According to another aspect of the embodiments of the present invention, a target client control apparatus is further provided, including: a first obtaining unit, configured to obtain a target log generated during the running of the target client, wherein the target client Supporting code implantation; a sending unit, configured to send the target code to the target client when it is determined according to the target log that the target client has an external attack; so that the target client runs the target code Prevent external attacks.

Optionally, the above-mentioned apparatus includes: a second obtaining unit, configured to obtain an access request of the target client before obtaining the target log generated during the operation of the target client, wherein the access request is used for establishing a communication connection with the target client, and the access request carries verification information; a first establishment unit is configured to establish communication with the target client when the verification information matches the preset verification information connect.

Optionally, the above device further includes: a third obtaining unit, configured to obtain the information of the target client after establishing a communication connection with the target client when the verification information matches the preset verification information. a target log; a checking unit for checking the validity of the target client according to the target log according to a predetermined period; a first cancel establishment unit for canceling the validity of the target client when the target client does not have validity Describe the communication connection of the target client.

Optionally, the above apparatus further includes: a second cancel establishment unit, configured to determine, according to the target log, that the target client cannot normally access the network, and cancel the communication connection with the target client.

Optionally, the above-mentioned apparatus further includes: a third cancel establishment unit, configured to determine that the target client has illegal access to the network according to the target log, and cancel the communication connection with the target client.

According to another aspect of the embodiments of the present invention, there is also provided a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, wherein the computer program is configured to execute the above-mentioned target client when running Control Method.

According to another aspect of the embodiments of the present invention, an electronic device is also provided, including a memory, a processor, and a computer program stored in the memory and running on the processor, wherein the processor executes the above-mentioned computer program through the computer program Target client control method.

In the embodiment of the present invention, the target log generated during the running of the target client is obtained, wherein the target client supports code implantation; when it is determined that the target client has an external attack according to the target log, the target client is sent to the target client. Target code; in order to make the target client run the target code to prevent external attacks, and when the target client in the edge technology network is attacked, send the target code to the target client, so that the target client can run the target The purpose of the code to resist external attacks, so as to achieve the technical effect of ensuring the security of the target client and further ensuring the security of the edge technology network, thereby solving the technical problem that the method of improving the data security of the edge computing network is relatively simple in the prior art.

Description of drawings

The accompanying drawings described herein are used to provide a further understanding of the present invention and constitute a part of the present application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the attached image:

1 is a schematic diagram of an application environment of an optional target client control method according to an embodiment of the present invention;

2 is a flowchart of an optional target client control method according to an embodiment of the present invention;

3 is a flowchart of an optional control method based on edge computing that can be remotely and dynamically implanted in a running code client according to an embodiment of the present invention;

4 is a schematic diagram (1) of an optional interaction between a client and an edge computing network according to an embodiment of the present invention;

5 is a schematic diagram (2) of an optional interaction between a client and an edge computing network according to an embodiment of the present invention;

6 is a schematic diagram (1) of an optional interaction between an edge computing network and a cloud server according to an embodiment of the present invention;

7 is a schematic diagram (2) of an optional interaction between an edge computing network and a cloud server according to an embodiment of the present invention;

8 is a schematic diagram (3) of an optional interaction between a client and an edge computing network according to an embodiment of the present invention;

9 is a schematic diagram of an optional edge computing network processing according to an embodiment of the present invention;

10 is a schematic structural diagram of an optional target client control apparatus according to an embodiment of the present invention;

FIG. 11 is a schematic structural diagram of an optional electronic device according to an embodiment of the present invention.

Detailed ways

In order to make those skilled in the art better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only Embodiments are part of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

It should be noted that the terms "first", "second" and the like in the description and claims of the present invention and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific sequence or sequence. It is to be understood that the data so used may be interchanged under appropriate circumstances such that the embodiments of the invention described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" and "having" and any variations thereof, are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those expressly listed Rather, those steps or units may include other steps or units not expressly listed or inherent to these processes, methods, products or devices.

According to an aspect of the embodiments of the present invention, a method for controlling a target client is provided. Optionally, as an optional implementation manner, the foregoing method for controlling a target client may be, but not limited to, the method shown in FIG. 1 . In the hardware environment, the terminal device 102 , the network 110 , and the server 112 may be included but not limited to, wherein the terminal device 102 runs the target client.

The specific process is as follows: Steps S102-S106, the server 112 obtains the target log generated during the operation of the target client, wherein the target client supports code implantation; it is determined according to the target log that the target client has external attacks. , send the target code to the target client; so that the target client can run the target code to prevent external attacks, so that when the target client in the edge technology network is attacked, the target code is sent to the target client, so that the target client can be attacked. The target client runs the target code to defend against external attacks, thereby achieving the technical effect of ensuring the security of the target client and further ensuring the security of the edge technology network, thereby solving the problem of comparing the data security methods of the edge computing network in the prior art. A single technical issue.

Optionally, in this embodiment, the above target client control method may be, but is not limited to, applied to the server 112 for monitoring the target client according to the running target log of the target client. The above-mentioned target client may but is not limited to run in the terminal device 102, and the terminal device 102 may be, but is not limited to, a terminal device that supports running application clients, such as mobile phones, tablet computers, notebook computers, and PCs. The above-mentioned server 112 and the terminal device 102 may implement data interaction through, but not limited to, a network, and the above-mentioned network may include, but is not limited to, a wireless network or a wired network. Wherein, the wireless network includes: Bluetooth, WIFI and other networks that realize wireless communication. The above wired network may include, but is not limited to, a wide area network, a metropolitan area network, and a local area network. The above is only an example, which is not limited in this embodiment.

Optionally, as an optional implementation manner, as shown in FIG. 2 , the above-mentioned target client control method includes:

Step S202, acquiring the target log generated during the running process of the target client, wherein the target client supports code implantation.

Step S204 , when it is determined according to the target log that the target client has an external attack, send the target code to the target client, so that the target client runs the target code to prevent external attacks.

Optionally, in this embodiment, the application scenario of the above solution is: monitoring the processing process of the edge computing client, shielding the monitored behavior of hacker attacks, and recovering the paralysis of the edge computing network.

It should be noted that the above solution may include, but is not limited to, applications in servers and terminals.

Through the embodiments provided in this application, the target log generated during the running process of the target client is obtained, wherein the target client supports code implantation; when it is determined that the target client has an external attack according to the target log, the target client is sent to the target client. Target code; in order to make the target client run the target code to prevent external attacks, and when the target client in the edge technology network is attacked, send the target code to the target client, so that the target client can run the target The purpose of the code to resist external attacks, so as to achieve the technical effect of ensuring the security of the target client and further ensuring the security of the edge technology network, thereby solving the technical problem that the method of improving the data security of the edge computing network is relatively simple in the prior art.

Optionally, before obtaining the target log generated during the operation of the target client, the above method includes: obtaining an access request of the target client, wherein the access request is used to establish a communication connection with the target client, and the access request carries Verification information; if the verification information matches the preset verification information, establish a communication connection with the target client.

Optionally, when the verification information matches the preset verification information, after establishing a communication connection with the target client, the above method further includes: acquiring the target log of the target client; and checking the validity of the target client according to the target log according to a predetermined period. ;Cancel the communication connection with the target client if the target client is not valid.

Optionally, after acquiring the target log of the target client, the above method further includes: canceling the communication connection with the target client when it is determined according to the target log that the target client cannot normally access the network.

Optionally, after acquiring the target log of the target client, the above method further includes: canceling the communication connection with the target client when it is determined according to the target log that the target client has illegal access to the network.

As an optional embodiment, the present application also provides a control method based on edge computing that can be remotely and dynamically implanted in a running code client. As shown in Figure 3, the flow chart of the control method based on edge computing that can be remotely and dynamically implanted into the running code client.

Users can access edge computing clients that have been connected to the entire network to provide services.

Among them, the current user uses the client to provide services, and first accesses client 1. When client 1 can process the data required by the visitor, it is directly processed and returned by client 1. If client 1 cannot process the request of the current visitor, the Other client processing.

As shown in Figure 4, a schematic diagram of the interaction between the client and the edge computing network (1). As shown in FIG. 4 , verify, authenticate, collect logs, and return the request from the client to access the network device.

As shown in Figure 5, a schematic diagram (2) of the interaction between the client and the edge computing network. As shown in Figure 5, the authenticated client can provide services to the network, the network sends a request to the client to provide the service, and the client returns the processing result and records the log.

As shown in Figure 6, a schematic diagram of the interaction between the edge computing network and the cloud server (1). As shown in Figure 6, the collected logs are periodically sent to the cloud server.

As shown in Figure 7, a schematic diagram of the interaction between the edge computing network and the cloud server (2). As shown in Figure 7, the cloud server issues instructions, implants running codes, and enhances client service capabilities.

As shown in Figure 8, a schematic diagram of the interaction between the client and the edge computing network (3). As shown in Figure 8, the validity of the connected clients is regularly checked, and illegal clients are logged and kicked out.

As shown in Figure 9, a schematic diagram of edge computing network processing. As shown in Figure 9, analyze the logs sent back by the network, and intelligently issue commands to the network to maintain network security.

As can be seen from the above, as shown in Figure 4 to Figure 9, the client has the functions of accessing the network, recording logs, kicking out the device, sending logs, and providing service capabilities. The analysis log shields the clients that frequently cannot access the network normally, and regularly updates the client illegal verification logic to check the client, and removes the illegal clients that have been connected to restore the normal network service.

Through the embodiments provided in this application, the client of edge computing is effectively supervised and maintained. Avoid the problem of network paralysis caused by the client being breached.

It should be noted that, for the sake of simple description, the foregoing method embodiments are all expressed as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence. As in accordance with the present invention, certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

According to another aspect of the embodiments of the present invention, a target client control apparatus for implementing the above target client control method is also provided. As shown in FIG. 10 , the target client control apparatus includes: a first obtaining unit 1001 and a sending unit 1003 .

The first obtaining unit 1001 is configured to obtain the target log generated during the running process of the target client, wherein the target client supports code implantation.

The sending unit 1003 is configured to send the target code to the target client when it is determined according to the target log that the target client has external attacks; so that the target client runs the target code to prevent external attacks.

According to the embodiments provided in this application, the first obtaining unit 1001 obtains the target log generated during the running of the target client, wherein the target client supports code implantation; the sending unit 1003 determines, according to the target log, that the target client has external attacks. In this case, the target code is sent to the target client; so that the target client runs the target code to prevent external attacks.

Optionally, the above-mentioned apparatus may include: a second obtaining unit, configured to obtain the access request of the target client before obtaining the target log generated during the running of the target client, wherein the access request is used to establish a connection with the target client. The communication connection, the access request carries the verification information; the first establishment unit is used for establishing a communication connection with the target client when the verification information matches the preset verification information.

Optionally, the above-mentioned device may further include: a third obtaining unit, configured to obtain the target log of the target client after establishing the communication connection with the target client under the condition that the verification information matches the preset verification information; checking the validity of the target client according to the target log according to a predetermined period; the first canceling and establishing unit is used for canceling the communication connection with the target client when the target client does not have validity.

Optionally, the above-mentioned apparatus may further include: a second cancel establishment unit, configured to determine, according to the target log, that the target client cannot access the network normally, and cancel the communication connection with the target client.

Optionally, the above apparatus may further include: a third canceling and establishing unit, configured to determine according to the target log that the target client has illegal access to the network, and cancel the communication connection with the target client.

According to another aspect of the embodiments of the present invention, an electronic device for implementing the above target client control method is also provided. As shown in FIG. 11 , the electronic device includes a memory 1102 and a processor 1104 , and the memory 1102 stores There is a computer program, and the processor 1104 is configured to perform the steps in any of the above method embodiments by the computer program.

Optionally, in this embodiment, the above-mentioned electronic apparatus may be located in at least one network device among multiple network devices of a computer network.

Optionally, in this embodiment, the above-mentioned processor may be configured to execute the following steps through a computer program:

S1, obtain the target log generated during the running process of the target client, wherein the target client supports code implantation;

S2, when it is determined according to the target log that the target client has an external attack, send the target code to the target client; so that the target client runs the target code to prevent external attacks.

Optionally, those of ordinary skill in the art can understand that the structure shown in FIG. 11 is for illustration only, and the electronic device may also be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a handheld computer, and a mobile Internet device (Mobile Internet device). Internet Devices, MID), PAD and other terminal equipment. FIG. 11 does not limit the structure of the above electronic device. For example, the electronic device may also include more or fewer components than those shown in FIG. 11 (eg, network interfaces, etc.), or have a different configuration than that shown in FIG. 11 .

The memory 1102 may be used to store software programs and modules, such as program instructions/modules corresponding to the target client control method and device in the embodiment of the present invention, and the processor 1104 runs the software programs and modules stored in the memory 1102, thereby Execute various functional applications and data processing, that is, realize the above-mentioned target client control method. Memory 1102 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 1102 may further include memory located remotely from the processor 1104, and these remote memories may be connected to the terminal through a network. Examples of such networks include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof. Wherein, the memory 1102 may specifically, but not be limited to, be used for information such as the target log of the target client. As an example, as shown in FIG. 11 , the foregoing memory 1102 may include, but is not limited to, the first obtaining unit 1001 and the sending unit 1003 in the foregoing target client control apparatus. In addition, it may also include, but is not limited to, other module units in the above-mentioned target client control apparatus, which will not be repeated in this example.

Optionally, the above-mentioned transmission device 1106 is configured to receive or send data via a network. Specific examples of the above-mentioned networks may include wired networks and wireless networks. In one example, the transmission device 1106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices and routers through a network cable so as to communicate with the Internet or a local area network. In one example, the transmission device 1106 is a radio frequency (RF) module, which is used for wirelessly communicating with the Internet.

According to yet another aspect of the embodiments of the present invention, there is also provided a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, wherein the computer program is configured to execute any one of the above when running steps in a method embodiment.

Optionally, in this embodiment, the above-mentioned computer-readable storage medium may be configured to store a computer program for executing the following steps:

S1, obtain the target log generated during the running process of the target client, wherein the target client supports code implantation;

S2, when it is determined according to the target log that the target client has an external attack, send the target code to the target client; so that the target client runs the target code to prevent external attacks.

Optionally, in this embodiment, those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above-mentioned embodiments can be completed by instructing the hardware related to the terminal device through a program, and the program can be stored in a In the computer-readable storage medium, the storage medium may include: a flash disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a magnetic disk or an optical disk, and the like.

The above-mentioned serial numbers of the embodiments of the present invention are only for description, and do not represent the advantages or disadvantages of the embodiments.

If the integrated units in the above-mentioned embodiments are implemented in the form of software functional units and sold or used as independent products, they may be stored in the above-mentioned computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, Several instructions are included to cause one or more computer devices (which may be personal computers, servers, or network devices, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present invention.

In the above-mentioned embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.

In the several embodiments provided in this application, it should be understood that the disclosed client may be implemented in other manners. The apparatus embodiments described above are only illustrative, for example, the division of the units is only a logical function division, and there may be other division methods in actual implementation, for example, multiple units or components may be combined or Integration into another system, or some features can be ignored, or not implemented. On the other hand, the shown or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of units or modules, and may be in electrical or other forms.

The units described as separate components may or may not be physically separated, and components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit. The above-mentioned integrated units may be implemented in the form of hardware, or may be implemented in the form of software functional units.

The above are only the preferred embodiments of the present invention. It should be pointed out that for those skilled in the art, without departing from the principles of the present invention, several improvements and modifications can be made. It should be regarded as the protection scope of the present invention.

Claims (12)

1. a target client control method, is characterized in that, comprises: Obtain the target log generated during the running process of the target client, wherein the target client supports code implantation; If it is determined according to the target log that the target client has an external attack, send the target code to the target client; So that the target client runs the target code to prevent external attacks. 2. The method according to claim 1, characterized in that, before obtaining the target log generated during the running process of the target client, the method comprises: acquiring an access request of the target client, wherein the access request is used to establish a communication connection with the target client, and the access request carries verification information; In the case that the verification information matches the preset verification information, a communication connection with the target client is established. 3. The method according to claim 2, characterized in that, after establishing a communication connection with the target client under the condition that the verification information matches preset verification information, the method further comprises: obtain the target log of the target client; Check the validity of the target client according to the target log according to a predetermined period; In the case that the target client is not valid, the communication connection with the target client is cancelled. 4. The method according to claim 3, wherein after acquiring the target log of the target client, the method further comprises: If it is determined according to the target log that the target client cannot access the network normally, the communication connection with the target client is canceled. 5. The method according to claim 3, wherein after acquiring the target log of the target client, the method further comprises: If it is determined according to the target log that the target client has access to the network illegally, the communication connection with the target client is cancelled. 6. A target client control device, comprising: a first obtaining unit, configured to obtain the target log generated during the running of the target client, wherein the target client supports code implantation; A sending unit, configured to send a target code to the target client when it is determined according to the target log that the target client has an external attack; So that the target client runs the target code to prevent external attacks. 7. The apparatus of claim 6, wherein the apparatus comprises: A second acquiring unit, configured to acquire an access request of the target client before acquiring the target log generated during the operation of the target client, wherein the access request is used to establish communication with the target client connection, the access request carries verification information; The first establishing unit is configured to establish a communication connection with the target client when the verification information matches the preset verification information. 8. The apparatus according to claim 7, wherein the apparatus further comprises: a third acquiring unit, configured to acquire the target log of the target client after establishing a communication connection with the target client when the verification information matches the preset verification information; A checking unit, configured to check the validity of the target client according to the target log according to a predetermined period; The first cancel establishment unit is configured to cancel the communication connection with the target client when the target client is not valid. 9. The apparatus of claim 8, wherein the apparatus further comprises: The second cancel establishment unit is configured to determine, according to the target log, that the target client cannot access the network normally, and cancel the communication connection with the target client. 10. The apparatus of claim 8, wherein the apparatus further comprises: A third cancel establishment unit, configured to determine that the target client has illegal access to the network according to the target log, and cancel the communication connection with the target client. 11. A computer-readable storage medium, characterized in that the computer-readable storage medium comprises a stored program, wherein the program executes the method described in any one of the preceding claims 1 to 5 when the program is run . 12. An electronic device comprising a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute any one of claims 1 to 5 through the computer program the method described.

Images