CN114301654A - Report file processing method and device, storage medium and processor - Google Patents
Report file processing method and device, storage medium and processor Download PDFInfo
- Publication number
- CN114301654A CN114301654A CN202111583682.XA CN202111583682A CN114301654A CN 114301654 A CN114301654 A CN 114301654A CN 202111583682 A CN202111583682 A CN 202111583682A CN 114301654 A CN114301654 A CN 114301654A
- Authority
- CN
- China
- Prior art keywords
- historical
- report file
- data
- report
- task
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
The application discloses a method and a device for processing a report file, a storage medium and a processor. The method comprises the following steps: acquiring coding information corresponding to a historical report file in a historical task, wherein the historical task is a previous task of a current task, and the current task generates a target report file according to a preset period, wherein the report file is a file for analyzing network threat data; acquiring historical report data according to the coding information; comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of data required by executing the current task; and displaying the comparison result in a target report file. By the method and the device, the problem that automatic comparison of periodic reports cannot be achieved in the related art is solved.
Description
Technical Field
The present application relates to the field of data analysis technologies, and in particular, to a method and an apparatus for processing a report file, a storage medium, and a processor.
Background
A method for generating an intranet security risk report on intranet security equipment through a report template comprises the following technical scheme:
1. presetting a plurality of default report templates, and displaying the report templates to a user;
2. supporting a user to self-define a configuration report template;
3. the user customizes a configuration report generation task and determines a report template which is selected to be used by the user, and the generation time of the report is immediate generation or timing generation (weekly/monthly/quarterly, and the like);
4. the system immediately or periodically generates reports corresponding to the templates and the parameters according to the templates and the related parameters of the report tasks configured by the user;
5. the user can edit, delete, enable or disable the configured reporting task;
6. all report files generated by the report tasks are stored in the system, and users can check or download the report files online.
Through the technology, the intranet safety risk report can be generated regularly and periodically, but the automatic periodic report comparison function is not realized; if the user wants to perform periodic comparison on the intranet security risk report files generated periodically, the report files of two periods need to be opened and checked for manual comparison.
Aiming at the problem that the automatic comparison of periodic reports cannot be realized in the related art, an effective solution is not provided at present.
Disclosure of Invention
The present application mainly aims to provide a method, an apparatus, a storage medium, and a processor for processing a report file, so as to solve the problem in the related art that automatic comparison of periodic reports cannot be achieved.
In order to achieve the above object, according to one aspect of the present application, there is provided a method of processing a report file. The method comprises the following steps: acquiring coding information corresponding to a historical report file in a historical task, wherein the historical task is a previous task of a current task, and the current task generates a target report file according to a preset period, wherein the report file is a file for analyzing network threat data; acquiring historical report data according to the coding information; comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of data required by executing the current task; and displaying the comparison result in a target report file.
Further, the acquiring of the historical report data according to the encoding information includes: detecting whether the configuration information of the historical task has coding information or not; if the coding information exists, judging whether a history report file corresponding to the coding information exists; and if the history report file corresponding to the coding information exists, acquiring history report data according to the history report file.
Further, before the comparison result is displayed in the target report file, the method further comprises: determining comparison data according to the comparison result, wherein the comparison data at least comprises: differential data between the historical report data and the target data; and generating a target report file according to the comparison data and the target data.
Further, acquiring the coding information corresponding to the history report file in the history task includes: acquiring configuration information of a historical task, wherein the configuration information at least comprises: parameter information of the historical task, wherein the parameter information at least comprises: historical task names and coding information corresponding to historical report files in the historical tasks; and determining the coding information corresponding to the historical report file according to the configuration information.
Further, after the comparison result is displayed in the target report file, the method further comprises: acquiring target coding information corresponding to a target report file; and updating the configuration information of the current task according to the target coding information.
Further, the historical task and the current task are executed according to a preset period, wherein the preset period comprises at least one of the following: a preset period according to the week time, a preset period according to the month time, and a preset period according to the quarter time.
In order to achieve the above object, according to another aspect of the present application, there is provided a processing apparatus of a report file. The device includes: the system comprises a first acquisition unit, a first processing unit and a second processing unit, wherein the first acquisition unit is used for acquiring coding information corresponding to a historical report file in a historical task, the historical task is a previous task of a current task, the current task generates a target report file according to a preset period, and the report file is a file for analyzing network threat data; a second acquisition unit configured to acquire history report data based on the coding information; the comparison unit is used for comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of the data required by the current task; and the display unit is used for displaying the comparison result in the target report file.
Further, the second acquisition unit includes: the detection module is used for detecting whether the configuration information of the historical task has coding information or not; the judging module is used for judging whether a history report file corresponding to the coding information exists or not if the coding information exists; and the first acquisition module is used for acquiring historical report data according to the historical report file if the historical report file corresponding to the coding information exists.
Further, the apparatus further comprises: the determining unit is used for determining comparison data according to the comparison result before the comparison result is displayed in the target report file, wherein the comparison data at least comprises: differential data between the historical report data and the target data; and the generating unit is used for generating a target report file according to the comparison data and the target data.
Further, the first acquisition unit includes: a second obtaining module, configured to obtain configuration information of the historical task, where the configuration information at least includes: parameter information of the historical task, wherein the parameter information at least comprises: historical task names and coding information corresponding to historical report files in the historical tasks; and the determining module is used for determining the coding information corresponding to the historical report file according to the configuration information.
Further, the apparatus further comprises: the third acquisition unit is used for acquiring target coding information corresponding to the target report file after the comparison result is displayed in the target report file; and the updating unit is used for updating the configuration information of the current task according to the target coding information.
Further, the historical task and the current task are executed according to a preset period, wherein the preset period comprises at least one of the following: a preset period according to the week time, a preset period according to the month time, and a preset period according to the quarter time.
According to another aspect of the embodiments of the present application, there is also provided a processor configured to execute a program, where the program executes to perform the method of any one of the above.
According to another aspect of embodiments of the present application, there is also provided a computer-readable storage medium having stored thereon a computer program/instructions which, when executed by a processor, perform the method of any one of the above.
Through the application, the following steps are adopted: acquiring coding information corresponding to a historical report file in a historical task, wherein the historical task is a previous task of a current task, and the current task generates a target report file according to a preset period, wherein the report file is a file for analyzing network threat data; acquiring historical report data according to the coding information; comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of data required by executing the current task; and displaying the comparison result in a target report file. The problem that automatic comparison of periodic reports cannot be achieved in the related art is solved. The historical report data is compared with the target data, and the comparison result is displayed in the target report file, so that the effect of automatically comparing the periodic reports is achieved.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this application, illustrate embodiments of the application and, together with the description, serve to explain the application and are not intended to limit the application. In the drawings:
FIG. 1 is a flow chart of a method for processing a report file provided according to an embodiment of the present application;
FIG. 2 is a flowchart illustrating the overall operation of a method for processing a report file according to an embodiment of the present application;
FIG. 3 is a diagram illustrating a first example of a target report file according to an exemplary method for processing a report file provided by an embodiment of the present application;
FIG. 4 is a second exemplary diagram of a target report file of a report file processing method according to an embodiment of the present application;
FIG. 5 is a diagram of a third example of a target report file of a report file processing method according to an embodiment of the present application;
FIG. 6 is a diagram of a target report file example of a report file processing method provided by an embodiment of the present application;
fig. 7 is a schematic diagram of a processing device for a report file provided according to an embodiment of the present application.
Detailed Description
It should be noted that the embodiments and features of the embodiments in the present application may be combined with each other without conflict. The present application will be described in detail below with reference to the embodiments with reference to the attached drawings.
In order to make the technical solutions better understood by those skilled in the art, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only partial embodiments of the present application, but not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
It should be noted that the terms "first," "second," and the like in the description and claims of this application and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It should be understood that the data so used may be interchanged under appropriate circumstances such that embodiments of the application described herein may be used. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
According to an embodiment of the present application, there is provided a method of processing a report file.
Fig. 1 is a flowchart of a processing method of a report file according to an embodiment of the present application. As shown in fig. 1, the method comprises the steps of:
step S101, obtaining coding information corresponding to a historical report file in a historical task, wherein the historical task is a previous task of a current task, and the current task generates a target report file according to a preset period, and the report file is a file for analyzing network threat data.
For example, the ID number (corresponding to the coding information in this application) corresponding to the historical report file of the last week on the intranet threat data is obtained, where the historical report file is generated by the historical task of the last week, that is, if the current task is executed on the current week, the historical task is executed based on the last cycle (i.e., last week) of the current task execution.
Optionally, in the method for processing a report file provided in the embodiment of the present application, the historical task and the current task are executed according to a preset period, where the preset period includes at least one of: a preset period according to the week time, a preset period according to the month time, and a preset period according to the quarter time.
Specifically, a periodic task is created according to a mode of generating a report file every week, wherein the periodic task at least comprises a historical task and a current task, for example, the historical task and the current task generate an analysis report of threat data of an intranet according to a preset period, and the periodic task can also perform generation work of the report file every quarter and every month, so that the periodic diversity of risk assessment of the threat data by the method is further embodied, and the user experience is improved.
And step S102, acquiring historical report data according to the coding information.
For example, when the generation mode of the task of configuring the report file by the user is periodic generation, an ID parameter is added in the configuration item of the task in the background to mark the ID number of the report file generated by the periodic task last time
Optionally, in the method for processing a report file provided in an embodiment of the present application, acquiring historical report data according to encoding information includes: detecting whether the configuration information of the historical task has coding information or not; if the coding information exists, judging whether a history report file corresponding to the coding information exists; and if the history report file corresponding to the coding information exists, acquiring history report data according to the history report file.
For example, fig. 2 is an overall operation flowchart of a processing method of a report file provided according to an embodiment of the present application, as shown in fig. 2, the root acquires a previous-cycle history task for generating an intranet threat data analysis report, checks an ID parameter value (i.e., ID number) of configuration information in the history task, determines whether a previous-cycle history report file for analyzing intranet threat data exists if the ID number exists, acquires data of the previous-cycle report file if the ID number exists, and if the ID number does not exist, or the report file of the ID cannot be queried (perhaps because the report file was manually deleted), the periodic comparison is not performed, and the periodic report file is generated directly, for example, by searching the ID parameters of the report files, the period comparison of the intranet safety risk reports is automatically realized, the manpower is further liberated, and a user can invest more time for processing intranet risks.
Optionally, in the method for processing a report file provided in the embodiment of the present application, the obtaining of the coding information corresponding to the history report file in the history task includes: acquiring configuration information of a historical task, wherein the configuration information at least comprises: parameter information of the historical task, wherein the parameter information at least comprises: historical task names and coding information corresponding to historical report files in the historical tasks; and determining the coding information corresponding to the historical report file according to the configuration information.
Specifically, the coding information corresponding to the historical report file is obtained by obtaining the configuration information of the historical task of the intranet threat data of the enterprise, and the subsequent comparison efficiency of the report file in the adjacent period is improved.
Step S103, comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of the data required for executing the current task.
And step S104, displaying the comparison result in a target report file.
Specifically, as shown in fig. 2, the data in the current period (i.e., the period of the current task) is compared with the data in the report file in the previous period, and the report file in the current period, i.e., the target report file, is determined according to the comparison result.
Optionally, in the method for processing a report file provided in the embodiment of the present application, before displaying the comparison result in the target report file, the method further includes: determining comparison data according to the comparison result, wherein the comparison data at least comprises: differential data between the historical report data and the target data; and generating a target report file according to the comparison data and the target data.
For example, the application may also obtain, in the background, the history report file generated in the last period of the task by using the value of the ID parameter of the periodic task (corresponding to the current task in the application), and implement the comparison between the two report files, that is, the data in the two periods, in the background, to obtain the compared data.
For example, fig. 3 is a first example of a target report file of a report file processing method provided in an embodiment of the present application, and as shown in fig. 3, shows data of this period of a threat event, a vulnerability number, a risk server, a risk terminal, and a work order number in the target report file, and a comparison result of the data with a historical report file of the previous period.
For example, fig. 4 is a second exemplary target report file of the report file processing method provided in the embodiment of the present application, and as shown in fig. 4, a vulnerability profile of threat data of the report file in the current task cycle is shown, where the threat profile of the threat data includes external threats, lateral threats, external threats, and the like.
For example, fig. 5 is a third exemplary target report file of the report file processing method provided in the embodiment of the present application, and as shown in fig. 5, a vulnerability profile of threat data of the report file of the current task cycle is shown, where the vulnerability profile of the threat data includes a serious threat, a high-risk threat, a medium-risk threat, a low-risk threat, and the like.
For example, fig. 6 is a fourth exemplary target report file of the report file processing method provided in the embodiment of the present application, where, as shown in fig. 6, a server security status distribution diagram of the report file of the current task cycle is shown, where the server security status distribution diagram includes a serious threat, a high-risk threat, a medium-risk threat, a low-risk threat, and the like.
Specifically, in the period report file generated by the period report task, the number of intranet threat events, risk servers and risk terminals in the period is displayed, the comparison result between the period and the previous period is displayed more intuitively, and convenience is brought to a user to use and analyze the period report.
For example, if the number of the threat events and the risk assets in the previous period is significantly increased compared with the intranet security risk report in the present period, it indicates that an abnormal condition occurs in the intranet, and the user is required to investigate and solve the risk assets. After the user processes, if the intranet security risk report of the next period is reduced compared with the threat event and the risk asset number of the period, the previous processing of the user is effective, and the defense capability of threat data is further improved.
Optionally, in the method for processing a report file provided in the embodiment of the present application, after the comparison result is displayed in the target report file, the method further includes: acquiring target coding information corresponding to a target report file; and updating the configuration information of the current task according to the target coding information.
It should be noted that, after the report file is generated for the first time by the report task executed in the period, the system will fill the ID of the generated report file into the ID parameter of the task, and after the report file is generated again by the report task executed in the period each time, the system will update the ID parameter value of the task to the ID of the report file generated last time.
According to the method for processing the report file, the coding information corresponding to the historical report file in the historical task is obtained, wherein the historical task is the last task of the current task, the current task generates the target report file according to the preset period, and the report file is a file for analyzing the network threat data; acquiring historical report data according to the coding information; comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of data required by executing the current task; and displaying the comparison result in a target report file. The problem that automatic comparison of periodic reports cannot be achieved in the related art is solved. The historical report data is compared with the target data, and the comparison result is displayed in the target report file, so that the effect of automatically comparing the periodic reports is achieved.
It should be noted that the steps illustrated in the flowcharts of the figures may be performed in a computer system such as a set of computer-executable instructions and that, although a logical order is illustrated in the flowcharts, in some cases, the steps illustrated or described may be performed in an order different than presented herein.
The embodiment of the present application further provides a processing apparatus for a report, and it should be noted that the processing apparatus for a report of the embodiment of the present application may be used to execute the processing method for a report provided in the embodiment of the present application. The following describes a processing apparatus for a report file provided in an embodiment of the present application.
Fig. 7 is a schematic diagram of a processing device of a report file according to an embodiment of the present application. As shown in fig. 7, the apparatus includes: a first obtaining unit 701, a second obtaining unit 702, a comparing unit 703 and a showing unit 704.
Specifically, the first obtaining unit 701 is configured to obtain coding information corresponding to a history report file in a history task, where the history task is a previous task of a current task, and the current task generates a target report file according to a preset period, where the report file is a file for analyzing network threat data;
a second obtaining unit 702, configured to obtain history report data according to the encoding information;
a comparing unit 703, configured to compare the historical report data with target data to obtain a comparison result, where the target data is one of data required for executing the current task;
and the presentation unit 704 is used for presenting the comparison result in the target report file.
To sum up, in the report file processing apparatus provided in the embodiment of the present application, the first obtaining unit 701 obtains the coding information corresponding to the historical report file in the historical task, where the historical task is a previous task of the current task, and the current task generates the target report file according to the preset period, and the report file is a file for analyzing the network threat data; the second acquisition unit 702 acquires history report data according to the encoding information; the comparing unit 703 compares the historical report data with target data to obtain a comparison result, where the target data is one of data required for executing the current task; the display unit 704 displays the comparison result in the target report file, so that the problem that automatic comparison of periodic reports cannot be realized in the related art is solved. The historical report data is compared with the target data, and the comparison result is displayed in the target report file, so that the effect of automatically comparing the periodic reports is achieved.
Optionally, in the processing apparatus for a report file provided in the embodiment of the present application, the second obtaining unit 702 includes: the detection module is used for detecting whether the configuration information of the historical task has coding information or not; the judging module is used for judging whether a history report file corresponding to the coding information exists or not if the coding information exists; and the first acquisition module is used for acquiring historical report data according to the historical report file if the historical report file corresponding to the coding information exists.
Optionally, in the processing apparatus for a report file provided in an embodiment of the present application, the apparatus further includes: the determining unit is used for determining comparison data according to the comparison result before the comparison result is displayed in the target report file, wherein the comparison data at least comprises: differential data between the historical report data and the target data; and the generating unit is used for generating a target report file according to the comparison data and the target data.
Optionally, in the processing apparatus for a report file provided in an embodiment of the present application, the first obtaining unit 701 includes: a second obtaining module, configured to obtain configuration information of the historical task, where the configuration information at least includes: parameter information of the historical task, wherein the parameter information at least comprises: historical task names and coding information corresponding to historical report files in the historical tasks; and the determining module is used for determining the coding information corresponding to the historical report file according to the configuration information.
Optionally, in the processing apparatus for a report file provided in an embodiment of the present application, the apparatus further includes: the third acquisition unit is used for acquiring target coding information corresponding to the target report file after the comparison result is displayed in the target report file; and the updating unit is used for updating the configuration information of the current task according to the target coding information.
Optionally, in the processing apparatus for a report file provided in an embodiment of the present application, the historical task and the current task are executed according to a preset cycle, where the preset cycle includes at least one of: a preset period according to the week time, a preset period according to the month time, and a preset period according to the quarter time.
The report file processing device comprises a processor and a memory, wherein the first acquiring unit 701, the second acquiring unit 702, the comparing unit 703, the showing unit 704 and the like are stored in the memory as program units, and the processor executes the program units stored in the memory to realize corresponding functions.
The processor comprises a kernel, and the kernel calls the corresponding program unit from the memory. The kernel can set one or more than one, and the report file is processed by adjusting the kernel parameters.
The memory may include volatile memory in a computer readable medium, Random Access Memory (RAM) and/or nonvolatile memory such as Read Only Memory (ROM) or flash memory (flash RAM), and the memory includes at least one memory chip.
An embodiment of the present invention provides a storage medium on which a program is stored, the program implementing a method of processing a report file when executed by a processor.
The embodiment of the invention provides a processor, which is used for running a program, wherein a processing method of a report file is executed when the program runs.
The embodiment of the invention provides equipment, which comprises a processor, a memory and a program which is stored on the memory and can run on the processor, wherein the processor executes the program and realizes the following steps: acquiring coding information corresponding to a historical report file in a historical task, wherein the historical task is a previous task of a current task, and the current task generates a target report file according to a preset period, wherein the report file is a file for analyzing network threat data; acquiring historical report data according to the coding information; comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of data required by executing the current task; and displaying the comparison result in a target report file.
The processor executes the program and further realizes the following steps: detecting whether the configuration information of the historical task has coding information or not; if the coding information exists, judging whether a history report file corresponding to the coding information exists; and if the history report file corresponding to the coding information exists, acquiring history report data according to the history report file.
The processor executes the program and further realizes the following steps: before the comparison result is displayed in the target report file, determining comparison data according to the comparison result, wherein the comparison data at least comprises: differential data between the historical report data and the target data; and generating a target report file according to the comparison data and the target data.
The processor executes the program and further realizes the following steps: acquiring configuration information of a historical task, wherein the configuration information at least comprises: parameter information of the historical task, wherein the parameter information at least comprises: historical task names and coding information corresponding to historical report files in the historical tasks; and determining the coding information corresponding to the historical report file according to the configuration information.
The processor executes the program and further realizes the following steps: after the comparison result is displayed in the target report file, target coding information corresponding to the target report file is acquired; and updating the configuration information of the current task according to the target coding information.
The processor executes the program and further realizes the following steps: the historical tasks and the current tasks are executed according to a preset period, wherein the preset period comprises at least one of the following steps: a preset period according to the week time, a preset period according to the month time, and a preset period according to the quarter time.
The device herein may be a server, a PC, a PAD, a mobile phone, etc.
The present application further provides a computer program product adapted to perform a program for initializing the following method steps when executed on a data processing device: acquiring coding information corresponding to a historical report file in a historical task, wherein the historical task is a previous task of a current task, and the current task generates a target report file according to a preset period, wherein the report file is a file for analyzing network threat data; acquiring historical report data according to the coding information; comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of data required by executing the current task; and displaying the comparison result in a target report file.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: detecting whether the configuration information of the historical task has coding information or not; if the coding information exists, judging whether a history report file corresponding to the coding information exists; and if the history report file corresponding to the coding information exists, acquiring history report data according to the history report file.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: before the comparison result is displayed in the target report file, determining comparison data according to the comparison result, wherein the comparison data at least comprises: differential data between the historical report data and the target data; and generating a target report file according to the comparison data and the target data.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: acquiring configuration information of a historical task, wherein the configuration information at least comprises: parameter information of the historical task, wherein the parameter information at least comprises: historical task names and coding information corresponding to historical report files in the historical tasks; and determining the coding information corresponding to the historical report file according to the configuration information.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: after the comparison result is displayed in the target report file, target coding information corresponding to the target report file is acquired; and updating the configuration information of the current task according to the target coding information.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: the historical tasks and the current tasks are executed according to a preset period, wherein the preset period comprises at least one of the following steps: a preset period according to the week time, a preset period according to the month time, and a preset period according to the quarter time.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.
The memory may include forms of volatile memory in a computer readable medium, Random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). The memory is an example of a computer-readable medium.
Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.
It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in the process, method, article, or apparatus that comprises the element.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The above are merely examples of the present application and are not intended to limit the present application. Various modifications and changes may occur to those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.
Claims (10)
1. A method for processing a report file, comprising:
acquiring coding information corresponding to a historical report file in a historical task, wherein the historical task is a previous task of a current task, and the current task generates a target report file according to a preset period, wherein the report file is a file for analyzing network threat data;
acquiring historical report data according to the coding information;
comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of the data required by executing the current task;
and displaying the comparison result in the target report file.
2. The method of claim 1, wherein obtaining historical report data based on the encoded information comprises:
detecting whether the coded information exists in the configuration information of the historical task;
if the coding information exists, judging whether a history report file corresponding to the coding information exists;
and if the history report file corresponding to the coding information exists, acquiring the history report data according to the history report file.
3. The method of claim 1, wherein prior to presenting the comparison result in the target report file, the method further comprises:
determining comparison data according to the comparison result, wherein the comparison data at least comprises: differential data between the historical report data and the target data;
and generating the target report file according to the comparison data and the target data.
4. The method of claim 1, wherein obtaining coding information corresponding to a history report file in a history task comprises:
acquiring configuration information of the historical task, wherein the configuration information at least comprises: parameter information of the historical task, wherein the parameter information at least comprises: historical task names and coding information corresponding to historical report files in the historical tasks;
and determining the coding information corresponding to the historical report file according to the configuration information.
5. The method of claim 1, wherein after presenting the comparison result in the target report file, the method further comprises:
acquiring target coding information corresponding to the target report file;
and updating the configuration information of the current task according to the target coding information.
6. The method of claim 1, wherein the historical task and the current task are executed according to the preset period, wherein the preset period comprises at least one of: a preset period according to the week time, a preset period according to the month time, and a preset period according to the quarter time.
7. A device for processing a report file, comprising:
the system comprises a first acquisition unit, a first processing unit and a second processing unit, wherein the first acquisition unit is used for acquiring coding information corresponding to a historical report file in a historical task, the historical task is a previous task of a current task, the current task generates a target report file according to a preset period, and the report file is a file for analyzing network threat data;
the second acquisition unit is used for acquiring historical report data according to the coding information;
the comparison unit is used for comparing the historical report data with target data to obtain a comparison result, wherein the target data is one of the data required by the current task;
and the display unit is used for displaying the comparison result in the target report file.
8. The apparatus of claim 7, wherein the second obtaining unit comprises:
the detection module is used for detecting whether the coded information exists in the configuration information of the historical task;
the judging module is used for judging whether a history report file corresponding to the coding information exists or not if the coding information exists;
and the first acquisition module is used for acquiring the historical report data according to the historical report file if the historical report file corresponding to the coding information exists.
9. A processor, characterized in that the processor is configured to execute a program, wherein the program executes a method for processing a report file according to any one of claims 1 to 6.
10. A computer-readable storage medium characterized in that the storage medium stores a program, wherein the program executes the method of processing a report file according to any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111583682.XA CN114301654A (en) | 2021-12-22 | 2021-12-22 | Report file processing method and device, storage medium and processor |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111583682.XA CN114301654A (en) | 2021-12-22 | 2021-12-22 | Report file processing method and device, storage medium and processor |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN114301654A true CN114301654A (en) | 2022-04-08 |
Family
ID=80970307
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111583682.XA Pending CN114301654A (en) | 2021-12-22 | 2021-12-22 | Report file processing method and device, storage medium and processor |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114301654A (en) |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20020097291A (en) * | 2001-06-20 | 2002-12-31 | (주)엔토시스 | Method for analyzing log of wireless internet |
| US20100313109A1 (en) * | 2009-06-04 | 2010-12-09 | Hon Hai Precision Industry Co., Ltd. | System and method for generating a periodic report |
| CN103605523A (en) * | 2013-11-25 | 2014-02-26 | 上海爱数软件有限公司 | Automatic generation and storage method for historical file content version |
| US20180025063A1 (en) * | 2015-03-31 | 2018-01-25 | Huawei Technologies Co., Ltd. | Analysis Engine and Method for Analyzing Pre-Generated Data Reports |
| CN108011721A (en) * | 2017-12-06 | 2018-05-08 | 北京明朝万达科技股份有限公司 | A kind of data leak method for early warning and system based on restoring files |
| CN110069411A (en) * | 2019-04-15 | 2019-07-30 | 网易（杭州）网络有限公司 | Client performance quality report generation method, device, medium and electronic equipment |
| CN110096429A (en) * | 2019-03-18 | 2019-08-06 | 深圳壹账通智能科技有限公司 | Test report generation method, device, equipment and storage medium |
| CN110428127A (en) * | 2019-06-19 | 2019-11-08 | 深圳壹账通智能科技有限公司 | Automated analysis method, user equipment, storage medium and device |
| US20200159926A1 (en) * | 2018-11-20 | 2020-05-21 | Sap Se | Threat detection using artifact change analysis |
-
2021
- 2021-12-22 CN CN202111583682.XA patent/CN114301654A/en active Pending
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20020097291A (en) * | 2001-06-20 | 2002-12-31 | (주)엔토시스 | Method for analyzing log of wireless internet |
| US20100313109A1 (en) * | 2009-06-04 | 2010-12-09 | Hon Hai Precision Industry Co., Ltd. | System and method for generating a periodic report |
| CN103605523A (en) * | 2013-11-25 | 2014-02-26 | 上海爱数软件有限公司 | Automatic generation and storage method for historical file content version |
| US20180025063A1 (en) * | 2015-03-31 | 2018-01-25 | Huawei Technologies Co., Ltd. | Analysis Engine and Method for Analyzing Pre-Generated Data Reports |
| CN108011721A (en) * | 2017-12-06 | 2018-05-08 | 北京明朝万达科技股份有限公司 | A kind of data leak method for early warning and system based on restoring files |
| US20200159926A1 (en) * | 2018-11-20 | 2020-05-21 | Sap Se | Threat detection using artifact change analysis |
| CN110096429A (en) * | 2019-03-18 | 2019-08-06 | 深圳壹账通智能科技有限公司 | Test report generation method, device, equipment and storage medium |
| CN110069411A (en) * | 2019-04-15 | 2019-07-30 | 网易（杭州）网络有限公司 | Client performance quality report generation method, device, medium and electronic equipment |
| CN110428127A (en) * | 2019-06-19 | 2019-11-08 | 深圳壹账通智能科技有限公司 | Automated analysis method, user equipment, storage medium and device |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105243252B (en) | A kind of method and device of account risk assessment | |
| CN110309109B (en) | Data monitoring method, device, computer equipment and storage medium | |
| CN110716966A (en) | Data visualization processing method and system, electronic device and storage medium | |
| CN111131290B (en) | Flow data processing method and device | |
| CN105095741A (en) | Behavior monitoring method and behavior monitoring system of application program | |
| CN109828780B (en) | Open source software identification method and device | |
| CN111931172A (en) | Financial system business process abnormity early warning method and device | |
| CN110941632A (en) | Database auditing method, device and equipment | |
| CN115659045A (en) | User operation identification method and device, storage medium and electronic equipment | |
| CN114301654A (en) | Report file processing method and device, storage medium and processor | |
| CN115688102A (en) | Window processing method and device, processor and electronic equipment | |
| CN114462370A (en) | Method and device for generating view, storage medium and electronic equipment | |
| CN114493378A (en) | Index acquisition method and device of industrial equipment and computer equipment | |
| CN112749159A (en) | Form generation method and device, electronic equipment and storage medium | |
| CN110968993A (en) | Information processing method and device, storage medium and processor | |
| CN112230935B (en) | Privacy risk detection method, device and equipment in application | |
| CN110046055B (en) | Application flash backing processing method and device, terminal and computer readable storage medium | |
| CN110633181B (en) | Visual display method and device | |
| US20230412637A1 (en) | Hardware detection and prevention of cryptojacking | |
| CN113360168A (en) | Configuration file updating method and device, storage medium and processor | |
| CN117675284A (en) | Override detection method, device, processor and machine-readable storage medium | |
| CN114399223A (en) | Project monitoring method, system, terminal equipment and computer readable storage medium | |
| CN113743948A (en) | Method and device for generating transaction information file, electronic equipment and storage medium | |
| US20220100631A1 (en) | Microservices graph generation | |
| CN117591384A (en) | Program running state display method and device, storage medium and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |