CN114301784A - Network shooting range training environment construction method and device, electronic equipment and storage medium - Google Patents

Network shooting range training environment construction method and device, electronic equipment and storage medium Download PDF

Info

Publication number
CN114301784A
CN114301784A CN202111499060.9A CN202111499060A CN114301784A CN 114301784 A CN114301784 A CN 114301784A CN 202111499060 A CN202111499060 A CN 202111499060A CN 114301784 A CN114301784 A CN 114301784A
Authority
CN
China
Prior art keywords
network
shooting range
environment
library
range training
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202111499060.9A
Other languages
Chinese (zh)
Other versions
CN114301784B (en
Inventor
朱广劼
姚洪磊
司群
李琪
杨轶杰
付晓丹
张德栋
贺晓聪
张骁
蕾丝萦
傅一馨
王红伟
王张超
冯凯亮
乔小龙
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Academy of Railway Sciences Corp Ltd CARS
China State Railway Group Co Ltd
Institute of Computing Technologies of CARS
Original Assignee
China Academy of Railway Sciences Corp Ltd CARS
China State Railway Group Co Ltd
Institute of Computing Technologies of CARS
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Academy of Railway Sciences Corp Ltd CARS, China State Railway Group Co Ltd, Institute of Computing Technologies of CARS filed Critical China Academy of Railway Sciences Corp Ltd CARS
Priority to CN202111499060.9A priority Critical patent/CN114301784B/en
Publication of CN114301784A publication Critical patent/CN114301784A/en
Application granted granted Critical
Publication of CN114301784B publication Critical patent/CN114301784B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00Reducing energy consumption in communication networks
    • Y02D30/70Reducing energy consumption in communication networks in wireless communication networks

Landscapes

  • Mobile Radio Communication Systems (AREA)

Abstract

The invention provides a method and a device for constructing a network shooting range training environment, electronic equipment and a storage medium, wherein the method comprises the following steps: utilizing an ad hoc network system to access the mobile terminal equipment into an ad hoc network environment in a dynamic host configuration protocol mode, and acquiring network configuration from a dynamic host configuration protocol server; acquiring a target scene template library from a cloud security resource library according to a network shooting range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template; and loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment. The invention realizes automatic deployment of the vulnerability environment on the basis of ad hoc network, greatly improves the construction efficiency of the shooting range environment, and the dynamic network shooting range training environment formed by the method has excellent portability and can realize networking communication under the network-free environment.

Description

Network shooting range training environment construction method and device, electronic equipment and storage medium
Technical Field
The invention relates to the field of network security, in particular to a method and a device for constructing a network shooting range training environment, electronic equipment and a storage medium.
Background
Under the increasingly severe network security situation, a large number of platforms and systems called network target ranges emerge in the industry, most of the platforms and systems are used for supporting network security training and competition, and some products are used for supporting more complex network security attack and defense drilling, evaluation testing, technical verification and security research. From the construction and use conditions of the network shooting range, how to quickly construct a target scene (namely a target environment) required by various businesses such as shooting range drilling, training, testing, verification and the like is very important, and the time cost is reduced, which is a difficult point and a pain point of the network shooting range. Particularly for the urgent and rapid deployment requirements, the current static-based construction technology often cannot meet the time requirement.
The current technical scheme mainly comprises the following modes: the method comprises the steps of utilizing a virtualization technology to carry out large-scale copying or simulation on a target network and a system to form a target scene of a network shooting range, storing scene information in a standardized (such as XML) or customized configuration file, developing a special software system, and carrying out maintenance, loading, modification, storage and other operations on the configuration information so as to finish the use of the target scene. By utilizing the SDN technology, the capability of software for defining the network is enhanced, the complex network shooting range environment is constructed, generated, modified, maintained and the like, the network topology structure required by the network shooting range system is quickly and flexibly defined, the network topology is quickly and flexibly changed, and the scale expansion of the shooting range experimental network is quickly and flexibly realized.
The target scene for constructing the network target range by using the prior art has high cost, low efficiency and less change, and can not meet various requirements of emergency services. A traditional network target range target scene lacks portability and cannot be deployed and applied in an isolation environment quickly. The traditional network shooting range training environment is extremely easy to damage in various activities carried out by the shooting range, but lacks self-regulation and self-repair functions, so that the maintenance cost is very high.
Disclosure of Invention
The invention provides a method and a device for constructing a network shooting range training environment, which are used for solving the technical defects in the prior art.
The invention provides a method for constructing a network shooting range training environment, which comprises the following steps:
utilizing an ad hoc network system to access mobile terminal equipment into an ad hoc network environment in a dynamic host configuration protocol mode, acquiring network configuration from a dynamic host configuration protocol server, and configuring the mobile terminal equipment according to the network configuration;
acquiring a target scene template library from a cloud security resource library according to a network shooting range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template;
and loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps of loading the target scene template library into the ad hoc network system in an application container engine mode, and forming the network shooting range training environment for deploying the vulnerability environment:
after the target scene template library is loaded, reporting the loading condition to a command scheduling platform;
the command scheduling platform is utilized to access audio and video information of a dynamic network shooting range training environment into a large visual screen for real-time monitoring and scheduling command; the audio and video information comprises network topology, operating system information, application software information and security vulnerability information.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps that by utilizing an ad hoc network system, mobile terminal equipment is accessed into the ad hoc network environment in a dynamic host configuration protocol mode, network configuration is obtained from a dynamic host configuration protocol server, and before the mobile terminal equipment is configured according to the network configuration, the method comprises the following steps:
establishing a centerless multi-hop mesh networking structure by using an ad hoc network system;
and connecting and communicating the networking equipment nodes in the mesh networking structure in a many-to-many mode so that each networking equipment node in the constructed mesh networking structure has more than one wireless uplink link.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps that before the mobile terminal equipment is accessed into the ad hoc network environment in a dynamic host configuration protocol mode by using the ad hoc network system and network configuration is acquired from a dynamic host configuration protocol server, the method comprises the following steps:
after a networking equipment node is started, all modules in the networking equipment node automatically discover each other and determine the working mode and the intelligent scanning channel of each module;
discovering a new node when one or more new nodes are added to the mesh networking structure; and after networking authorization is carried out on the new node, the new node is configured.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps that before the mobile terminal equipment is accessed into the ad hoc network environment in a dynamic host configuration protocol mode by using the ad hoc network system and network configuration is acquired from a dynamic host configuration protocol server, the method comprises the following steps:
each networking equipment node takes signal strength and network performance as indexes and selects optimal path routing flow from a plurality of wireless links at preset time intervals;
and adjusting the data path based on the optimal path routing flow.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps of after acquiring a target scene template library from a cloud security resource library according to a network shooting range training script:
acquiring a network attack and defense tool library and a network security vulnerability library from the cloud security resource library; the network attack and defense tool library comprises an acquisition path, an installation script and a use description of each attack tool; the network security vulnerability library comprises an acquisition path, a technical principle, a deployment script and a use description of each vulnerability;
and supplementing the network shooting range training environment based on the network attack and defense tool library and the network security cave library.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps of after acquiring a target scene template library from a cloud security resource library according to a network shooting range training script:
the method comprises the steps of providing hardware virtualization capability and deploying a virtualization layer supporting an application container engine, wherein the virtualization layer is provided with a cloud platform, and the cloud platform is used for uniformly managing virtualization resources of various basic software.
The invention also provides a network shooting range training environment construction device, which comprises:
the dynamic network configuration module is used for accessing the mobile terminal equipment into an ad hoc network environment in a dynamic host configuration protocol mode by using an ad hoc network system, acquiring network configuration from a dynamic host configuration protocol server and configuring the mobile terminal equipment according to the network configuration;
the target scene template library acquisition module is used for acquiring a target scene template library from a cloud security resource library according to a network target range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template;
and the loading module is used for automatically loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment.
The invention also provides an electronic device, which comprises a memory, a processor and a computer program stored on the memory and capable of running on the processor, wherein the processor executes the program to realize the steps of the network range training environment construction method.
The present invention also provides a non-transitory computer readable storage medium having stored thereon a computer program which, when executed by a processor, performs the steps of the network range training environment construction method as described in any of the above.
According to the invention, the spatial deviation and the time deviation of each line section of each public transport means are obtained after continuous screening, processing and optimization are carried out through the stop point signals of the public transport means and the 5G track data of the user, the overall deviation is further obtained, the trip mode of the user taking the public transport means can be more accurately identified by taking the overall deviation as a basis, the track of the user taking the public transport means and the specific taking and leaving time are obtained, and the method has important significance for traffic network optimization, dynamic scheduling and the like.
Drawings
In order to more clearly illustrate the technical solutions of the present invention or the prior art, the drawings needed for the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and those skilled in the art can also obtain other drawings according to the drawings without creative efforts.
FIG. 1 is a schematic flow chart of a method for constructing a network shooting range training environment provided by the invention;
fig. 2 is a schematic diagram of a general architecture of a technical solution in the network shooting range training environment construction method provided by the invention.
FIG. 3 is a schematic structural diagram of a network shooting range training environment construction device provided by the invention;
fig. 4 is a schematic structural diagram of an electronic device provided in the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings, and it is obvious that the described embodiments are some, but not all embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The following describes a network shooting range training environment construction method of the present invention with reference to fig. 1, where the method includes:
s1, using the ad hoc network system to access the mobile terminal device into the ad hoc network environment in a dynamic host configuration protocol mode, and obtaining the network configuration from the dynamic host configuration protocol server, and configuring the mobile terminal device according to the network configuration;
mobile terminal devices (including smart phones, tablet computers, network cameras, notebook computers, etc.) accessed to the ad hoc network environment are all accessed in a DHCP (Dynamic Host Configuration Protocol) mode, and network Configuration is acquired from a DHCP server. DHCP is a network protocol for local area networks.
S2, acquiring a target scene template library from a cloud security resource library according to the network shooting range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template;
each target scene template in the library of target scene templates consists of the following common attributes: unique ID, template major class, template minor class, template name, template version number, template size, template MD5 check code and template acquisition path. Templates fall into three broad categories: a basic software template, an application software template and a business data template. The private attributes of each type of template are composed as follows:
basic software template, system attributes (CPU number and performance/memory size/disk size and type/external device/operating system version, etc.), basic software deployment script, template custom extension attributes.
Application software template: running environment attributes (number and performance of CPUs, memory size, disk size and type, external device/operating system version, etc.), application attributes (port number/application service name/application service version number), application deployment scripts, template custom extension attributes.
A service data template: data content, data deployment scripts and template custom extension attributes.
And S3, loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment.
And automatically loading the dynamic network shooting range training environment into an ad hoc network system in an application container engine (docker) mode, thereby forming the dynamic network shooting range training environment for automatically deploying the vulnerability environment.
The invention realizes automatic deployment of the vulnerability environment on the basis of ad hoc network, greatly improves the construction efficiency of the shooting range environment, and the dynamic network shooting range training environment formed by the method has excellent portability, can realize mutual networking communication in the network-free environment, quickly constructs the network shooting range in the complex environment, and even can construct unmanned aerial vehicle shooting range nodes; the network attack and defense drill command and cooperation system can well support the bidirectional transmission of data, voice and video information and the access of a database server.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps of loading the target scene template library into the ad hoc network system in an application container engine mode, and forming the network shooting range training environment for deploying the vulnerability environment:
after the target scene template library is loaded, reporting the loading condition to a command scheduling platform;
the command scheduling platform is utilized to access audio and video information of a dynamic network shooting range training environment into a large visual screen for real-time monitoring and scheduling command; the audio and video information comprises network topology, operating system information, application software information and security vulnerability information.
After the information is loaded, the information is automatically reported to a command scheduling platform, and the network topology, the operating system information, the application software information and the security vulnerability information of the whole training environment are combined into a visual large screen for subsequent command scheduling operation. And the situation map of each training unit is dynamically displayed by combining scheduling software.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps that before the mobile terminal equipment is accessed into the ad hoc network environment in a dynamic host configuration protocol mode by using the ad hoc network system and network configuration is acquired from a dynamic host configuration protocol server, the method comprises the following steps:
establishing a centerless multi-hop mesh networking structure by using an ad hoc network system;
and connecting and communicating the networking equipment nodes in the mesh networking structure in a many-to-many mode so that each networking equipment node in the constructed mesh networking structure has more than one wireless uplink link.
The invention has the mesh networking function: the method supports the centerless multi-hop mesh networking technology, equipment nodes are connected and communicated in a many-to-many mode, each node in the constructed mesh network has more than one wireless uplink, the topological structure surpasses the traditional wireless point-to-point and point-to-multipoint topological structure, the availability of wireless transmission service is improved, and the influence of obstacles such as buildings and the like in large-scale wireless network deployment of a network target range is solved.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps that before the mobile terminal equipment is accessed into the ad hoc network environment in a dynamic host configuration protocol mode by using the ad hoc network system and network configuration is acquired from a dynamic host configuration protocol server, the method comprises the following steps:
after a networking equipment node is started, all modules in the networking equipment node mutually discover each other and determine the working mode and the intelligent scanning channel of each module;
discovering a new node when one or more new nodes are added to the mesh networking structure; and after networking authorization is carried out on the new node, the new node is configured.
The invention has the configuration-free networking function: the method supports automatic configuration capability, and after the network node is started, all modules in the node automatically discover each other and automatically determine respective working modes, intelligent scanning channels and other functions without manual configuration of each device. When one or more newly added nodes in the network exist, the system can also automatically discover the new nodes, and the new nodes can be automatically configured after networking authorization is carried out on the nodes through the management interface. The automatic configuration and automatic discovery capability of the system is suitable for emergency handling and rapid deployment scene requirements.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps that before the mobile terminal equipment is accessed into the ad hoc network environment in a dynamic host configuration protocol mode by using the ad hoc network system and network configuration is acquired from a dynamic host configuration protocol server, the method comprises the following steps:
each networking equipment node takes signal strength and network performance as indexes and selects optimal path routing flow from a plurality of wireless links at preset time intervals;
and adjusting the data path based on the optimal path routing flow.
The invention also has the intelligent routing function: after the wireless network connection is established, a centerless ad hoc network structure is formed, and each network node continuously executes a decision algorithm at a certain time interval. The distributed intelligence of each node takes the signal strength and the network performance as indexes, the optimal path routing flow is selected from a plurality of wireless links, and the data path is continuously and dynamically adjusted, so that the broadcasting is limited and the bottleneck is eliminated. This ensures that any changes in the network topology due to the addition or removal of network elements are immediately detected and relevant measures taken to ensure that the network is always at optimal performance and operation. Thus, the network has two ad-hoc network characteristics of self-regulation of performance and automatic link repair. Before a fault occurs, the ad hoc network node keeps the information of a main link and an alternative link and continuously and dynamically updates a link information list; when a certain point in the network fails due to power supply, damage and the like, other peripheral equipment can quickly select an alternative link with optimal parameters from an alternative link table as a main link.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps of after acquiring a target scene template library from a cloud security resource library according to a network shooting range training script:
acquiring a network attack and defense tool library and a network security vulnerability library from the cloud security resource library; the network attack and defense tool library comprises an acquisition path, an installation script and a use description of each attack tool; the network security vulnerability library comprises an acquisition path, a technical principle, a deployment script and a use description of each vulnerability;
and supplementing the network shooting range training environment based on the network attack and defense tool library and the network security cave library.
Attack tools in the network attack and defense tool library comprise various attack capabilities such as port scanning, vulnerability discovery, password cracking, database penetration, cross-network attack, lasso attack, phishing attack, social engineering attack, DDoS attack and the like; the defense tools comprise various types of defense capabilities such as a firewall, a WAF, virus searching and killing, malicious code special killing, vulnerability protection, IDS, IPS, SOC and the like;
the security vulnerability database is in butt joint with important vulnerability platforms (CNVD, CNNVD, CVE and the like) in the industry, and various security vulnerability information is obtained from a compliance channel and is divided into six categories of hardware category, basic software category, middleware category, mainstream application category, network protocol category and mobile internet category.
The method for constructing the network shooting range training environment, provided by the invention, comprises the following steps of after acquiring a target scene template library from a cloud security resource library according to a network shooting range training script:
the method comprises the steps of providing hardware virtualization capability and deploying a virtualization layer supporting an application container engine, wherein the virtualization layer is provided with a cloud platform, and the cloud platform is used for uniformly managing virtualization resources of various basic software.
For further explaining the network shooting range training environment construction method of the present invention, referring to fig. 2, the embodiment of the present invention further provides a general architecture of a technical solution for implementing the method.
The whole technical scheme consists of a local automatic networking shooting range training environment and a cloud safety capacity resource library. Wherein:
1. the training environment of the local automatic networking shooting range is divided into four layers:
(1) and automatically networking the layers.
The shooting range ad hoc network function consists of the following parts:
A. portable ad hoc network hardware and supporting software: and the hardware and the matched software of the wireless router supporting the MESH networking function. A plurality of networking hardware automatically generate a mesh network which has four networking modes of star, tree, serial and bus type, and can also be mixed for networking. Although the wireless network consists of a plurality of wireless routing devices, the SSID (Service set identifier) is uniform, the node with the best signal can be automatically searched for connection for data transmission, and the mobile terminal device can be seamlessly switched to different nodes, so that a good roaming effect is realized.
B. And the ad hoc network communication module. 340/580Mhz MESH, 1.4Ghz MESH and 2.4/5.8Ghz MESH technologies are adopted to realize network connection between nodes, and ultra-short wave bands are adopted to improve the signal diffraction capability aiming at the uncertainty of the field environment. The 340Mhz main frequency point can vertically penetrate through more than 3 floors, and is suitable for communication networking in buildings and even basements; the 580Mhz dominant frequency point single-hop short-distance can penetrate through two buildings, and is suitable for networking and transmission from indoor to outdoor; the requirement of 1.4G master frequency point on the overhead height is lower, the single-hop transmission distance can reach more than 2KM, and the method is suitable for outdoor scenes, roads, parks and other scenes; the 2.4G and 5.8G main frequency points can provide larger interconnection bandwidth in an unobstructed environment, and are generally used for scenes with elevated conditions or close-range man-vehicle communication.
And C, WiFi access communication module. The access function of the mobile terminal is provided, the 2.4Ghz or 5.8Ghz frequency band of the 802.11 standard is adopted, the channel capacity and compatibility are improved, and the access of the portable terminals such as a smart phone, a notebook computer, a tablet computer, a PAD, a camera and a sensor is supported.
D. An Ethernet communication module. The access of a cable network, a satellite network and an operator base station is provided, and the interconnection with an external public communication system is realized.
(2) A system virtual layer:
the system virtual layer provides hardware virtualization capability, and on the basis, a virtualization layer supporting Docker is deployed, wherein the virtualization layer has a simple cloud platform and is used for uniformly managing virtualization resources of various basic software on the upper layer. The layer supports conventional Windows, Linux and other operating systems, and can also run complex system bug environments through full virtualization software such as Bochs and the like.
(3) Applying a simulation layer:
the application simulation layer provides various application simulation systems with good equivalence for the shooting range training environment by running the application software template in the cloud security resource library. Including Web, Mail, DB, ERP, OA, webcam, etc., and provides background data flow and business data flow, and script execution through data templates is effected.
(4) And a command scheduling layer:
audio and video information acquired by the front-end information acquisition equipment can be transmitted to the command platform in a wireless mode, and the ad hoc network portable node can extend and widen the signal coverage range in a complex environment, is ready to use, and has the characteristics of quickness and flexibility.
The command platform has the advantages that various functions of the command platform directly access audio and video information to a monitor or a large screen through the movable ad hoc network node device to perform real-time monitoring and scheduling command, meanwhile, video switching and browsing are performed through scheduling software, and storage and retrieval can be performed through the existing storage device, so that the command and scheduling functions of real-time visible, audible, talkback, controllable and other network shooting range training environments are realized.
The cloud security capability resource library consists of the following contents: the contents of the target scene template library, the network attack and defense tool library and the network security leakage library are as described in the above embodiments.
Referring to fig. 3, the network shooting range training environment construction apparatus provided by the present invention is described below, and the network shooting range training environment construction apparatus described below and the network shooting range training environment construction method described above may be referred to correspondingly, where the network shooting range training environment construction apparatus includes:
a dynamic network configuration module 10, configured to utilize an ad hoc network system to access a mobile terminal device to an ad hoc network environment in a dynamic host configuration protocol manner, obtain a network configuration from a dynamic host configuration protocol server, and configure the mobile terminal device according to the network configuration;
mobile terminal devices (including smart phones, tablet computers, network cameras, notebook computers, etc.) accessed to the ad hoc network environment are all accessed in a DHCP (Dynamic Host Configuration Protocol) mode, and network Configuration is acquired from a DHCP server. DHCP is a network protocol for local area networks.
The target scene template library obtaining module 20 is configured to obtain a target scene template library from a cloud security resource library according to a network shooting range training script, where the target scene template library includes a basic software template, an application software template, and a service data template;
each target scene template in the library of target scene templates consists of the following common attributes: unique ID, template major class, template minor class, template name, template version number, template size, template MD5 check code and template acquisition path.
And the loading module 30 is configured to load the target scene template library into the ad hoc network system in an application container engine manner, so as to form a network shooting range training environment for deploying a vulnerability environment.
And automatically loading the dynamic network shooting range training environment into an ad hoc network system in an application container engine (docker) mode, thereby forming the dynamic network shooting range training environment for automatically deploying the vulnerability environment.
The network target range training environment construction device provided by the invention further comprises a commanding and scheduling module, wherein the commanding and scheduling module is used for:
after the target scene template library is automatically loaded, reporting the loading condition to a command scheduling platform;
the command scheduling platform is utilized to access audio and video information of a dynamic network shooting range training environment into a large visual screen for real-time monitoring and scheduling command; the audio and video information comprises network topology, operating system information, application software information and security vulnerability information.
After the information is loaded, the information is automatically reported to a command scheduling platform, and the network topology, the operating system information, the application software information and the security vulnerability information of the whole training environment are combined into a visual large screen for subsequent command scheduling operation. And the situation map of each training unit is dynamically displayed by combining scheduling software.
The network shooting range training environment construction device comprises a mesh networking module, wherein the mesh networking module is used for:
establishing a centerless multi-hop mesh networking structure by using an ad hoc network system;
and connecting and communicating the networking equipment nodes in the mesh networking structure in a many-to-many mode so that each networking equipment node in the constructed mesh networking structure has more than one wireless uplink link.
The invention has the mesh networking function: the method supports the centerless multi-hop mesh networking technology, equipment nodes are connected and communicated in a many-to-many mode, each node in the constructed mesh network has more than one wireless uplink, the topological structure surpasses the traditional wireless point-to-point and point-to-multipoint topological structure, the availability of wireless transmission service is improved, and the influence of obstacles such as buildings and the like in large-scale wireless network deployment of a network target range is solved.
The network shooting range training environment construction device comprises a configuration-free networking module, wherein the configuration-free networking module is used for:
after a networking equipment node is started, all modules in the networking equipment node mutually discover each other and determine the working mode and the intelligent scanning channel of each module;
discovering a new node when one or more new nodes are added to the mesh networking structure; and after networking authorization is carried out on the new node, the new node is configured.
The invention has the configuration-free networking function: the method supports automatic configuration capability, and after the network node is started, all modules in the node automatically discover each other and automatically determine respective working modes, intelligent scanning channels and other functions without manual configuration of each device. When one or more newly added nodes in the network exist, the system can also automatically discover the new nodes, and the new nodes can be automatically configured after networking authorization is carried out on the nodes through the management interface. The automatic configuration and automatic discovery capability of the system is suitable for emergency handling and rapid deployment scene requirements.
The network shooting range training environment construction device comprises an intelligent routing module, wherein the intelligent routing module is used for:
each networking equipment node takes signal strength and network performance as indexes and selects optimal path routing flow from a plurality of wireless links at preset time intervals;
and adjusting the data path based on the optimal path routing flow.
The invention also has the intelligent routing function: after the wireless network connection is established, a centerless ad hoc network structure is formed, and each network node continuously executes a decision algorithm at a certain time interval. The distributed intelligence of each node takes the signal strength and the network performance as indexes, the optimal path routing flow is selected from a plurality of wireless links, and the data path is continuously and dynamically adjusted, so that the broadcasting is limited and the bottleneck is eliminated. This ensures that any changes in the network topology due to the addition or removal of network elements are immediately detected and relevant measures taken to ensure that the network is always at optimal performance and operation. Thus, the network has two ad-hoc network characteristics of self-regulation of performance and automatic link repair. Before a fault occurs, the ad hoc network node keeps the information of a main link and an alternative link and continuously and dynamically updates a link information list; when a certain point in the network fails due to power supply, damage and the like, other peripheral equipment can quickly select an alternative link with optimal parameters from an alternative link table as a main link.
The network range training environment construction device according to the invention, wherein the device further comprises an environment supplement module, and the environment supplement module is used for:
acquiring a network attack and defense tool library and a network security vulnerability library from the cloud security resource library; the network attack and defense tool library comprises an acquisition path, an installation script and a use description of each attack tool; the network security vulnerability library comprises an acquisition path, a technical principle, a deployment script and a use description of each vulnerability;
and supplementing the network shooting range training environment based on the network attack and defense tool library and the network security cave library.
Attack tools in the network attack and defense tool library comprise various attack capabilities such as port scanning, vulnerability discovery, password cracking, database penetration, cross-network attack, lasso attack, phishing attack, social engineering attack, DDoS attack and the like; the defense tools comprise various types of defense capabilities such as a firewall, a WAF, virus searching and killing, malicious code special killing, vulnerability protection, IDS, IPS, SOC and the like;
the security vulnerability database is in butt joint with important vulnerability platforms (CNVD, CNNVD, CVE and the like) in the industry, and various security vulnerability information is obtained from a compliance channel and is divided into six categories of hardware category, basic software category, middleware category, mainstream application category, network protocol category and mobile internet category.
The network shooting range training environment construction device comprises a virtualization module, wherein the virtualization module is used for:
the method comprises the steps of providing hardware virtualization capability and deploying a virtualization layer supporting an application container engine, wherein the virtualization layer is provided with a cloud platform, and the cloud platform is used for uniformly managing virtualization resources of various basic software.
Fig. 4 illustrates a physical structure diagram of an electronic device, which may include: a processor (processor)310, a communication Interface (communication Interface)320, a memory (memory)330 and a communication bus 340, wherein the processor 310, the communication Interface 320 and the memory 330 communicate with each other via the communication bus 340. Processor 310 may invoke logic instructions in memory 330 to perform a network range training environment construction method comprising:
s1, using the ad hoc network system to access the mobile terminal device into the ad hoc network environment in a dynamic host configuration protocol mode, and obtaining the network configuration from the dynamic host configuration protocol server, and configuring the mobile terminal device according to the network configuration;
s2, acquiring a target scene template library from a cloud security resource library according to the network shooting range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template;
and S3, loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment.
In addition, the logic instructions in the memory 330 may be implemented in the form of software functional units and stored in a computer readable storage medium when the software functional units are sold or used as independent products. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.
In another aspect, the present invention also provides a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, which when executed by a computer, enable the computer to execute the network range training environment construction method provided by the above methods, the method comprising:
s1, using the ad hoc network system to access the mobile terminal device into the ad hoc network environment in a dynamic host configuration protocol mode, and obtaining the network configuration from the dynamic host configuration protocol server, and configuring the mobile terminal device according to the network configuration;
s2, acquiring a target scene template library from a cloud security resource library according to the network shooting range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template;
and S3, loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment.
In yet another aspect, the present invention also provides a non-transitory computer-readable storage medium having stored thereon a computer program, which when executed by a processor is implemented to perform the network range training environment construction method provided above, the method comprising:
s1, using the ad hoc network system to access the mobile terminal device into the ad hoc network environment in a dynamic host configuration protocol mode, and obtaining the network configuration from the dynamic host configuration protocol server, and configuring the mobile terminal device according to the network configuration;
s2, acquiring a target scene template library from a cloud security resource library according to the network shooting range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template;
and S3, loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment.
The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.
Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. With this understanding in mind, the above-described technical solutions may be embodied in the form of a software product, which can be stored in a computer-readable storage medium such as ROM/RAM, magnetic disk, optical disk, etc., and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in the embodiments or some parts of the embodiments.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (10)

1. A network shooting range training environment construction method is characterized by comprising the following steps:
utilizing an ad hoc network system to access mobile terminal equipment into an ad hoc network environment in a dynamic host configuration protocol mode, acquiring network configuration from a dynamic host configuration protocol server, and configuring the mobile terminal equipment according to the network configuration;
acquiring a target scene template library from a cloud security resource library according to a network shooting range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template;
and loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment.
2. The method for constructing the network shooting range training environment according to claim 1, wherein the loading the target scene template library into the ad hoc network system in an application container engine manner comprises, after forming the network shooting range training environment for deploying a vulnerability environment:
after the target scene template library is loaded, reporting the loading condition to a command scheduling platform;
the command scheduling platform is utilized to access audio and video information of a dynamic network shooting range training environment into a large visual screen for real-time monitoring and scheduling command; the audio and video information comprises network topology, operating system information, application software information and security vulnerability information.
3. The method for constructing a network shooting range training environment according to claim 1, wherein before accessing the mobile terminal device to the ad hoc network environment in a dynamic host configuration protocol manner by using the ad hoc network system and acquiring the network configuration from the dynamic host configuration protocol server, the method comprises:
establishing a centerless multi-hop mesh networking structure by using an ad hoc network system;
and connecting and communicating the networking equipment nodes in the mesh networking structure in a many-to-many mode so that each networking equipment node in the constructed mesh networking structure has more than one wireless uplink link.
4. The method for constructing a network shooting range training environment according to claim 3, wherein before accessing the mobile terminal device to the ad hoc network environment in a dynamic host configuration protocol manner by using the ad hoc network system and acquiring the network configuration from the dynamic host configuration protocol server, the method comprises:
after a networking equipment node is started, all modules in the networking equipment node mutually discover each other and determine the working mode and the intelligent scanning channel of each module;
discovering a new node when one or more new nodes are added to the mesh networking structure; and after networking authorization is carried out on the new node, the new node is configured.
5. The method for constructing a network shooting range training environment according to claim 4, wherein before accessing the mobile terminal device to the ad hoc network environment in a dynamic host configuration protocol manner by using the ad hoc network system and acquiring the network configuration from the dynamic host configuration protocol server, the method comprises:
each networking equipment node takes signal strength and network performance as indexes and selects optimal path routing flow from a plurality of wireless links at preset time intervals;
and adjusting the data path based on the optimal path routing flow.
6. The method for constructing the network shooting range training environment according to claim 1, wherein after acquiring the target scene template library from the cloud security resource library according to the network shooting range training script, the method comprises:
acquiring a network attack and defense tool library and a network security vulnerability library from the cloud security resource library; the network attack and defense tool library comprises an acquisition path, an installation script and a use description of each attack tool; the network security vulnerability library comprises an acquisition path, a technical principle, a deployment script and a use description of each vulnerability;
and supplementing the network shooting range training environment based on the network attack and defense tool library and the network security cave library.
7. The method for constructing the network shooting range training environment according to claim 1, wherein after acquiring the target scene template library from the cloud security resource library according to the network shooting range training script, the method comprises:
the method comprises the steps of providing hardware virtualization capability and deploying a virtualization layer supporting an application container engine, wherein the virtualization layer is provided with a cloud platform, and the cloud platform is used for uniformly managing virtualization resources of various basic software.
8. A network shooting range training environment construction device is characterized by comprising:
the dynamic network configuration module is used for accessing the mobile terminal equipment into an ad hoc network environment in a dynamic host configuration protocol mode by using an ad hoc network system, acquiring network configuration from a dynamic host configuration protocol server and configuring the mobile terminal equipment according to the network configuration;
the target scene template library acquisition module is used for acquiring a target scene template library from a cloud security resource library according to a network target range training script, wherein the target scene template library comprises a basic software template, an application software template and a business data template;
and the loading module is used for loading the target scene template library into the ad hoc network system in an application container engine mode to form a network shooting range training environment for deploying a vulnerability environment.
9. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the steps of the network range training environment construction method according to any one of claims 1 to 7 when executing the program.
10. A non-transitory computer readable storage medium having stored thereon a computer program, wherein the computer program, when executed by a processor, implements the steps of the network range training environment construction method according to any one of claims 1 to 7.
CN202111499060.9A 2021-12-09 2021-12-09 Method and device for constructing network target range training environment, electronic equipment and storage medium Active CN114301784B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111499060.9A CN114301784B (en) 2021-12-09 2021-12-09 Method and device for constructing network target range training environment, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111499060.9A CN114301784B (en) 2021-12-09 2021-12-09 Method and device for constructing network target range training environment, electronic equipment and storage medium

Publications (2)

Publication Number Publication Date
CN114301784A true CN114301784A (en) 2022-04-08
CN114301784B CN114301784B (en) 2024-02-09

Family

ID=80967378

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111499060.9A Active CN114301784B (en) 2021-12-09 2021-12-09 Method and device for constructing network target range training environment, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN114301784B (en)

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114816513A (en) * 2022-06-29 2022-07-29 湖南大佳数据科技有限公司 Fusion system and method of network security target range and satellite navigation training system
CN114818396A (en) * 2022-06-29 2022-07-29 湖南大佳数据科技有限公司 Network security shooting range system and drilling method for satellite navigation system
CN114915467A (en) * 2022-04-21 2022-08-16 南京联成科技发展股份有限公司 System and method for realizing network security attack and defense drilling
CN115190042A (en) * 2022-06-16 2022-10-14 南京赛宁信息技术有限公司 Network target range target access state detection system and method
CN115208660A (en) * 2022-07-14 2022-10-18 软极网络技术(北京)有限公司 Transparent access method for network target range equipment
CN116319482A (en) * 2023-05-22 2023-06-23 南京赛宁信息技术有限公司 Wazuh-based custom probe acquisition system and method in network target range
US11689420B1 (en) * 2022-04-28 2023-06-27 Cisco Technology, Inc. Template based edge cloud core deployment
CN116506440A (en) * 2023-06-19 2023-07-28 中国人民解放军陆军航空兵学院 LVC (Linear variable capacitance) integration method and system for combined test training
CN117118868A (en) * 2023-07-03 2023-11-24 合肥拓扑信息科技有限公司 Distributed mobile ad hoc network target monitoring and evaluating system and method
CN117808275A (en) * 2024-03-01 2024-04-02 江苏天创科技有限公司 ACS visualization technology-based target range management method and system
US12034596B2 (en) 2023-05-15 2024-07-09 Cisco Technology, Inc. Template based edge cloud core deployment

Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080137556A1 (en) * 2006-12-08 2008-06-12 Jun-Hee Park Mesh networking auto configuration method, virtual link setting method, packet transmission method in multi-hop wireless lan, and terminal thereof
CN104936168A (en) * 2015-05-04 2015-09-23 北京柏惠维康科技有限公司 Efficient wireless mesh networking method
CN105792295A (en) * 2016-03-02 2016-07-20 南京邮电大学 Virtual fast switching method for wireless Mesh network based on dynamic cluster
CN108021428A (en) * 2017-12-05 2018-05-11 华迪计算机集团有限公司 A kind of method and system that network target range is realized based on Docker
CN110109756A (en) * 2019-04-28 2019-08-09 北京永信至诚科技股份有限公司 A kind of network target range construction method, system and storage medium
CN110912890A (en) * 2019-11-22 2020-03-24 上海交通大学 Novel vulnerability attack detection system for intranet
CN110943969A (en) * 2019-10-08 2020-03-31 成都天和讯达科技有限公司 Network attack scene reproduction method, system, equipment and storage medium
CN111464567A (en) * 2020-06-16 2020-07-28 鹏城实验室 Configuration method and device of attack and defense shooting range system and storage medium
CN111540245A (en) * 2020-04-08 2020-08-14 深圳拼客信息科技有限公司 Network information safety training system and method based on virtualization technology simulation
CN111600913A (en) * 2020-07-22 2020-08-28 南京赛宁信息技术有限公司 Self-adaptive access method and system for real equipment in attack and defense scene of network shooting range
CN112448857A (en) * 2021-02-01 2021-03-05 博智安全科技股份有限公司 Construction method, device and equipment of target range and storage medium

Patent Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080137556A1 (en) * 2006-12-08 2008-06-12 Jun-Hee Park Mesh networking auto configuration method, virtual link setting method, packet transmission method in multi-hop wireless lan, and terminal thereof
CN104936168A (en) * 2015-05-04 2015-09-23 北京柏惠维康科技有限公司 Efficient wireless mesh networking method
CN105792295A (en) * 2016-03-02 2016-07-20 南京邮电大学 Virtual fast switching method for wireless Mesh network based on dynamic cluster
CN108021428A (en) * 2017-12-05 2018-05-11 华迪计算机集团有限公司 A kind of method and system that network target range is realized based on Docker
CN110109756A (en) * 2019-04-28 2019-08-09 北京永信至诚科技股份有限公司 A kind of network target range construction method, system and storage medium
CN110943969A (en) * 2019-10-08 2020-03-31 成都天和讯达科技有限公司 Network attack scene reproduction method, system, equipment and storage medium
CN110912890A (en) * 2019-11-22 2020-03-24 上海交通大学 Novel vulnerability attack detection system for intranet
CN111540245A (en) * 2020-04-08 2020-08-14 深圳拼客信息科技有限公司 Network information safety training system and method based on virtualization technology simulation
CN111464567A (en) * 2020-06-16 2020-07-28 鹏城实验室 Configuration method and device of attack and defense shooting range system and storage medium
CN111600913A (en) * 2020-07-22 2020-08-28 南京赛宁信息技术有限公司 Self-adaptive access method and system for real equipment in attack and defense scene of network shooting range
CN112448857A (en) * 2021-02-01 2021-03-05 博智安全科技股份有限公司 Construction method, device and equipment of target range and storage medium

Non-Patent Citations (5)

* Cited by examiner, † Cited by third party
Title
ADJIANDEYESYLLA等: ""Formal Verification of orchestration Templates for Reliable Deployment with Openstack Heat"", 《IEEE》 *
吴怡晨;王轶骏;薛质;: ""面向网络空间的攻防靶场设计"", 《通信技术》, no. 10 *
姚洪磊等: ""铁路网络安全靶场设计及构建技术研究"", 《2020中国网络安全等级保护和关键信息基础设施保护大会论文集》 *
祝咏升等: ""铁路网络安全靶场设计与研究"", 《铁路计算机应用》, vol. 30, no. 8 *
赵静;: ""网络空间安全靶场技术研究及系统架构设计"", 《电脑知识与技术》, no. 03 *

Cited By (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114915467A (en) * 2022-04-21 2022-08-16 南京联成科技发展股份有限公司 System and method for realizing network security attack and defense drilling
US11689420B1 (en) * 2022-04-28 2023-06-27 Cisco Technology, Inc. Template based edge cloud core deployment
US20230353453A1 (en) * 2022-04-28 2023-11-02 Cisco Technology, Inc. Template based edge cloud core deployment
CN115190042B (en) * 2022-06-16 2023-09-08 南京赛宁信息技术有限公司 Network target range target access state detection system and method
CN115190042A (en) * 2022-06-16 2022-10-14 南京赛宁信息技术有限公司 Network target range target access state detection system and method
CN114816513A (en) * 2022-06-29 2022-07-29 湖南大佳数据科技有限公司 Fusion system and method of network security target range and satellite navigation training system
CN114818396B (en) * 2022-06-29 2022-09-20 湖南大佳数据科技有限公司 Network security shooting range system and drilling method for satellite navigation system
CN114816513B (en) * 2022-06-29 2022-09-20 湖南大佳数据科技有限公司 Fusion system and method of network security target range and satellite navigation training system
CN114818396A (en) * 2022-06-29 2022-07-29 湖南大佳数据科技有限公司 Network security shooting range system and drilling method for satellite navigation system
CN115208660A (en) * 2022-07-14 2022-10-18 软极网络技术(北京)有限公司 Transparent access method for network target range equipment
CN115208660B (en) * 2022-07-14 2024-03-22 软极网络技术(北京)有限公司 Transparent access method for network target range equipment
US12034596B2 (en) 2023-05-15 2024-07-09 Cisco Technology, Inc. Template based edge cloud core deployment
CN116319482A (en) * 2023-05-22 2023-06-23 南京赛宁信息技术有限公司 Wazuh-based custom probe acquisition system and method in network target range
CN116319482B (en) * 2023-05-22 2023-08-22 南京赛宁信息技术有限公司 Wazuh-based custom probe acquisition system and method in network target range
CN116506440B (en) * 2023-06-19 2023-08-29 中国人民解放军陆军航空兵学院 LVC (Linear variable capacitance) integration method and system for combined test training
CN116506440A (en) * 2023-06-19 2023-07-28 中国人民解放军陆军航空兵学院 LVC (Linear variable capacitance) integration method and system for combined test training
CN117118868A (en) * 2023-07-03 2023-11-24 合肥拓扑信息科技有限公司 Distributed mobile ad hoc network target monitoring and evaluating system and method
CN117808275A (en) * 2024-03-01 2024-04-02 江苏天创科技有限公司 ACS visualization technology-based target range management method and system

Also Published As

Publication number Publication date
CN114301784B (en) 2024-02-09

Similar Documents

Publication Publication Date Title
CN114301784B (en) Method and device for constructing network target range training environment, electronic equipment and storage medium
US11910290B2 (en) Multiple application module or unit
US9967884B2 (en) Dedicated backhaul for whole home coverage
CN105392181B (en) A kind of networking method of smart machine, apparatus and system
CN105392185B (en) A kind of networking method of smart machine, apparatus and system
CN109417492A (en) A kind of network function NF management method and NF management equipment
CN106993302A (en) A kind of method of testing and system of AP equipment
CN105744597A (en) Terminal and wireless connection method
CN109068339B (en) Repeater and communication method, device and system based on mesh network
KR20240060592A (en) Communication methods and devices
Ilbeigi et al. An infrastructure-less emergency communication system: a blockchain-based framework
US10084656B2 (en) TRILL network establishing method, node, and system
US20220182795A1 (en) Broadcast method, apparatus, and system
CN104703211B (en) A kind of virtualization cut-in method and equipment
US20170318485A1 (en) Antenna Line Device Management Method, and Device
CN113727331B (en) 5G base station deployment method and device
CN113938874A (en) Data processing method, device, equipment and system
CN103167509B (en) Wireless lan signal extension device and method
CN106231596A (en) A kind of access point apparatus configuration devices and methods therefor, a kind of access point apparatus
RU2693903C1 (en) Method, apparatus and processing system for expanded port
CN102905294B (en) LWAPP (Light Weight Access Point Protocol) link backup method and device
CN107708142B (en) Grouping method, device and system for access device AP
WO2017219322A1 (en) Visible light communication access method, apparatus, device, and system
CN116867108A (en) Method for reconstructing key service capability of user plane function network element and communication device
Gilani et al. Mobility scenarios into future wireless access network

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant