CN116208519A - Network target range background flow generation system and method based on behavior agent - Google Patents

Network target range background flow generation system and method based on behavior agent Download PDF

Info

Publication number
CN116208519A
CN116208519A CN202310466718.9A CN202310466718A CN116208519A CN 116208519 A CN116208519 A CN 116208519A CN 202310466718 A CN202310466718 A CN 202310466718A CN 116208519 A CN116208519 A CN 116208519A
Authority
CN
China
Prior art keywords
behavior
flow
task
network
behavioral
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202310466718.9A
Other languages
Chinese (zh)
Other versions
CN116208519B (en
Inventor
谢峥
宋遥
高庆官
詹项羽
殷庆荣
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nanjing Cyber Peace Technology Co Ltd
Original Assignee
Nanjing Cyber Peace Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nanjing Cyber Peace Technology Co Ltd filed Critical Nanjing Cyber Peace Technology Co Ltd
Priority to CN202310466718.9A priority Critical patent/CN116208519B/en
Publication of CN116208519A publication Critical patent/CN116208519A/en
Application granted granted Critical
Publication of CN116208519B publication Critical patent/CN116208519B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/02Capturing of monitoring data
    • H04L43/026Capturing of monitoring data using flow identification
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876Network utilisation, e.g. volume of load or congestion level
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00Reducing energy consumption in communication networks
    • Y02D30/50Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Environmental & Geological Engineering (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

The invention discloses a network target range background flow generating system and method based on a behavior agent, wherein the system comprises a behavior flow library, a flow task arrangement module, a behavior distribution module and a behavior agent module, wherein the behavior flow library is used for storing and managing a behavior flow; the behavior flow is a sequence formed by a plurality of behavior steps, the sequence of the behavior steps and the time intervals of adjacent steps; the flow task scheduling module is used for performing background flow task scheduling; the behavior task distribution module is used for downloading a specified behavior flow from the behavior flow library, generating a behavior task and issuing the behavior task to the behavior agent module on the specified execution node; the behavior agent module is used for analyzing the behavior flow contained in the behavior task, executing the script to access the target server according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step, and realizing network operation to enable the behavior node to generate flow. The invention can improve the authenticity and flexibility of network background flow generation.

Description

Network target range background flow generation system and method based on behavior agent
Technical Field
The invention relates to a system and a method for generating network target range background flow based on a behavior agent, belonging to the technical field of network security.
Background
The network shooting range is an experimental platform for simulating a real network space combat environment through a virtualization technology so as to support combat capability research and weapon equipment verification. In order to better simulate the real network environment, besides simulating the real network architecture, background traffic caused by actions of browsing webpages, sending and receiving mails, watching online videos, playing network games and the like existing in the real network environment at any time is simulated.
The current method for generating traffic in the network target range mainly comprises the steps of sending a data packet to a target node (target aircraft) within a certain time through traffic generating tools such as a Scapy and the like, wherein the data packet is generated by two methods: 1. forging data packets of various protocols through tools such as Scapy and the like; 2. the read parses the real network traffic pcap packets recorded using tcpdump, etc. tools.
The current common background flow generation method has the following problems: 1. the flow generated by the fake data packet of the method is far different from the background flow in reality, and the authenticity is lacking. 2. The data packet obtained by the second method is true, but the generated traffic is repeated play of the recorded network traffic, which cannot be changed along with the change of the specific network environment, and cannot embody the true network condition, such as packet loss retransmission phenomenon caused by the congestion of the target range network. 3. Once the flow packet is recorded, the content in the flow packet is not changed any more, and the flow generated by each play is identical, so that the flow packet does not accord with the characteristics of real network flow in reality; 4. if the access content of the network background traffic needs to be modified, the recorded traffic packets can only be grabbed again, and the flexibility is lacking.
Disclosure of Invention
The invention aims to: aiming at the problems in the prior art, the invention aims to provide a system and a method for generating network target range background flow based on a behavior agent, which improve the authenticity and flexibility of network background flow generation.
The technical scheme is as follows: in order to achieve the above object, the present invention provides a network target range background flow generation system based on a behavior agent, including:
the behavior flow library is used for storing and managing the behavior flow; the behavior flow is an operation sequence formed by a plurality of behavior steps, the sequence of the behavior steps and the time intervals of adjacent operations; the action step is a section of script, and executing the script initiates an operation capable of generating network traffic once;
the flow task scheduling module is used for performing background flow task scheduling, wherein the tasks comprise execution time, execution nodes and behavior flows;
the behavior task distribution module is used for receiving the background flow task, downloading the specified behavior flow from the behavior flow library, generating the behavior task and transmitting the behavior task to the behavior agent module on the specified execution node;
the behavior agent module is deployed inside the behavior node and is used for receiving the behavior task, analyzing the behavior flow contained in the behavior task, executing script to access the target server according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step in the behavior flow, realizing network operation and enabling the behavior node to generate flow.
Preferably, the behavior flow library supports copying or editing of the behavior flow to generate a new behavior flow; the edited content includes scripts of the action steps and the sequence and time relationships between the action steps.
Preferably, the behavior flow library supports marking text content in scripts of behavior steps as behavior variables, and the behavior variables can be replaced before execution of the behavior flow, so as to realize access to different targets or provide different access parameters.
Preferably, the flow task orchestration module supports a user to set behavior variables; and if the behavior variable is set by the user, the behavior task distribution module modifies the behavior flow according to the behavior variable set by the user when generating the behavior task, and replaces the behavior variable.
In the implementation, the behavior node may be a virtual machine in the target range network, or may be an entity physical device; the target server can be deployed in the internal network of the network target range or outside the network target range, and provides services for the behavior nodes in the network target range through the network proxy.
When the method is specifically implemented, the network operation realized by the script of the action step comprises browsing a webpage, accessing a short video, collecting or sending mail and uploading or downloading a file by using an FTP tool; the target server comprises a Web server, a streaming media server, a mail server and an FTP file server.
Preferably, the system further comprises a behavior recording module, which is used for providing a user interface for recording personnel to perform network operation, and acquiring network behavior records by acquiring access history or capturing flow packets, so as to assist in compiling a behavior flow.
Based on the same inventive concept, the invention also provides a network target range background flow generation method based on the behavior agent, which comprises the following steps:
constructing and storing a behavior flow, wherein the behavior flow is a sequence formed by a plurality of behavior steps, the sequence of the behavior steps and the time intervals of adjacent steps; the action step is a section of script, and executing the script initiates an operation capable of generating network traffic once;
arranging background flow tasks, wherein the tasks comprise execution time, execution nodes and behavior flows;
downloading a specified behavior flow when the background flow task is triggered, generating a behavior task, and issuing the behavior task to a behavior agent on a specified execution node;
the behavior agent receives the behavior task, analyzes the behavior flow contained in the behavior task, and executes the script to access the target server according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step, so as to realize network operation and enable the behavior node to generate flow.
Preferably, when constructing the behavior flow, the text content in the script of the behavior step is supported to be marked as a behavior variable, and the behavior variable can be replaced before the execution of the behavior flow so as to realize the access to different targets or provide different access parameters; when background flow tasks are arranged, supporting a user to set behavior variables; and if the behavior variables are set by the user, modifying the behavior flow according to the behavior variables set by the user when the behavior tasks are generated, and replacing the behavior variables.
Based on the same inventive concept, the invention also provides a network target range background flow generation system, which comprises a management server and equipment for generating background flow; the management server and the device each include a memory, a processor, and a computer program stored on the memory and executable on the processor, the computer program on the management server being implemented when loaded into the processor: constructing and storing a behavior flow, wherein the behavior flow is a sequence formed by a plurality of behavior steps, the sequence of the behavior steps and the time intervals of adjacent steps; the action step is a section of script, and executing the script initiates an operation capable of generating network traffic once; arranging background flow tasks, wherein the tasks comprise execution time, execution nodes and behavior flows; the execution node is equipment which needs to generate background traffic; downloading a specified behavior flow when the background flow task is triggered, generating a behavior task, and issuing the behavior task to a computer program on a specified execution node;
the computer program on the device is implemented when loaded into the processor: and receiving the behavior task, analyzing the behavior flow contained in the behavior task, and executing the script to access the target server according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step, so as to realize network operation and enable the flow to occur on the equipment.
The beneficial effects are that: the invention can record the network behavior of the real user, analyze the network request, convert the operation related to the network flow into the script, and arrange the scripts according to a certain sequence and time relationship to form a complete network behavior flow. The generated behavior flow can be automatically executed in the network target nodes through the behavior agent, so that the real network flow is caused, and the background flow in the real network environment is simulated. Compared with the prior art, the invention has the following advantages: 1. by automating the execution of behavioral flows derived from real network behaviors, real network background traffic occurs in the target range. 2. Because of the real network behavior, the generated traffic can change along with the change of the specific network environment, and the real network environment in the target range can be better reflected. 3. The method supports the replacement of part of content in the behavior flow by the user, so that the generated flow can be changed, and the method is more in line with the network flow characteristics in reality. 4. The access content for modifying the background flow does not need to be re-recorded, and only the behavior script or the sequence, the time relation and the like of the script are modified, so that the generated background flow is changed, and the method has high flexibility.
Drawings
FIG. 1 is a system deployment diagram of an embodiment of the present invention.
Fig. 2 is a detailed flowchart of an embodiment of the present invention.
Description of the embodiments
The technical scheme of the invention will be clearly and completely described below with reference to the accompanying drawings and specific embodiments.
As shown in fig. 1, the network targeting field background flow generation system based on the behavior agent disclosed in the embodiment of the invention mainly comprises a behavior flow library, a flow task arrangement module, a behavior task distribution module and a behavior agent module. The several modules involved in the figures are presented below:
behavior flow library: the function of the system is to store the behavior flow and support the user to edit the behavior flow. The behavior flow is a sequence composed of a plurality of behavior steps, the sequence thereof and the time intervals of adjacent steps; the action step is a section of script, and executing the script initiates an operation capable of generating network traffic once.
The flow task arrangement module: providing a user interface for a shooting range user to conduct background flow task arrangement, so that the user can specify information such as time of flow tasks, execution nodes, execution behavior flow and the like.
The behavior task distribution module: the system has the functions of receiving the flow tasks issued by the flow task arrangement module, downloading the behavior flows appointed by the flow tasks from the behavior script library, generating the behavior tasks and issuing the behavior tasks to the behavior agents on the appointed execution nodes.
The behavior agent module: is a specific execution unit of the behavior flow and is deployed inside the behavior node. The method comprises the steps of receiving the behavior tasks issued by the behavior task distribution module, analyzing the behavior flow contained in the behavior tasks, and executing the script according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step, so that network operation is realized, and the behavior nodes generate flow. The behavior nodes are computers in the range network, which may be virtual machines or physical devices, and the operating system includes Windows, linux, android, iOS and Mac OS systems. The system is internally provided with a behavior agent module and has an execution environment required by a script contained in a running behavior flow so as to support the execution of network behavior tasks.
The access target is an access object of network behavior recorded in the behavior script, and may be a Web server, a streaming media server, a mail server, an FTP file server, and the like. It may be deployed inside a range network; may also be deployed outside the range network, serving behavioural nodes within the range through network agents.
In addition, a recording module can be provided for implementing various network behaviors for recording personnel, acquiring the browser access history of the network behaviors, and acquiring related access records by means of grabbing flow packets and the like so as to be used for compiling auxiliary behavior flows.
In order to further improve flexibility of flow occurrence, the behavior flow library supports copying or editing of the behavior flow to generate a new behavior flow, and further supports marking text content in a script for realizing network operation as a behavior variable, wherein the behavior variable can be replaced before execution of the behavior flow so as to realize access to different targets or provide different access parameters. If the behavior flow defines behavior variables, a user can set the behavior variables in the flow task arrangement module, and if the user sets the behavior variables, the behavior task distribution module modifies the behavior flow according to the behavior variables set by the user when generating the behavior task, and the behavior variables are replaced, so that the generated flow is changed.
Based on the above system, a detailed process of operation of a typical networked range background flow generation is shown in fig. 2. The method comprises the following specific steps:
step 1, performing daily network actions in an operation system user interface provided by the recording module, such as browsing a group of web pages, sending and receiving mails, uploading and downloading files by using an FTP tool, and refreshing videos. Typically, a network behavior has a duration of several minutes to several hours. The recording module can record the traffic generated by the network behaviors by calling tools such as Wireshark and the like.
And 2, analyzing the browser record generated by the network behavior in the step 1 and record information such as the grabbed flow packets and the like, and acquiring network atom operations, the sequence of the network atom operations and the time intervals of adjacent operations contained in the network behavior, so as to obtain an operation sequence. Network atom operation here refers to: a separate, non-partitionable, user-initiated operation that can generate network traffic, such as accessing a web page, sending a mail, downloading a file using an FTP tool, viewing an online video, etc. Taking the behavior of browsing a webpage as an example, the sequence of operations is as follows: the A page was accessed first, the B page was accessed 3 seconds later, and the C page was accessed 10 seconds later.
And 3, realizing network atom operation contained in the operation sequence by using the script. Next, taking Python language as an example, how to implement specific network atom operations by writing scripts will be described.
Browsing web page operation: and calling the headless browser through the selenium module to realize the access to the appointed webpage.
Receiving mail: and accessing IMAP service of the mailbox server through the imaplib module to realize mail receiving operation.
Sending mail: and constructing an SMTP request through a smtplib module and the like, and realizing mail sending operation.
FTP upload download file: and (3) through the ftplib module, the FTP client is realized, and file uploading and downloading operations are performed.
Watching an online video: the operation of pulling the online video stream is realized by calling the FFmpeg tool through the python-FFmpeg module, and the network traffic can be generated as the same as that of watching the online video.
It should be noted that, the above scripts can be executed in the background, and the foreground operation of the target range user access behavior node is not affected. Different programming languages and tools may be chosen for implementation to achieve typical network behavior.
The script may be created by writing or by modifying a script template. For example, the script for realizing the operation of browsing the A webpage can be realized by writing a script code for specifically calling the headless browser to access the A webpage, or can be realized by modifying a preset browsing webpage script template of the system, configuring information such as the address of the A webpage, the cookie of the access user and the like, and further generating a script.
And storing the generated script as a behavior step, and combining a plurality of behavior steps by combining the sequence of network atom operations in the operation sequence and the time interval between two adjacent network atom operations to generate a behavior flow. The behavior flow comprises a plurality of behavior steps and the sequence and time relation of the behavior steps.
And 4, storing the behavior flow in the behavior flow library. It should be noted that the behavior flow library supports copying or editing of the behavior flow to generate a new behavior flow. The editable content includes the script and the sequence and time relationship between the script segments.
Taking the web browsing behavior flow as an example, it is assumed that it includes 3 steps: a. the script to access the A page is executed first, the script to access the B page is executed after b.3 seconds, and the script to access the C page is executed after c.10 seconds. Possible modifications include, but are not limited to: step a thereof may be edited to execute a script that accesses the D page; the step b and the step c can exchange the execution sequence; the execution time interval of the step b and the step c is reduced from 10 seconds to 5 seconds; it adds a script for executing FTP to download a certain file as step d. By any one of the modifications or the combination of the modifications, a new behavior flow can be generated, and the method has high flexibility and simplicity.
The behavior flow library also supports marking portions of text content in the script as behavior variables. The target user can replace the behavior variables before the behavior flow is executed, so that the specific content in the behavior flow is changed. Taking a webpage browsing behavior flow as an example, the accessed page address can be marked as a behavior variable; taking the action flow of sending mail as an example, the action flow can mark information such as addressee mailbox addresses, mail subjects and the like as action variables; taking the online video watching behavior flow as an example, the streaming media resource address may be marked as a behavior variable.
And 5, enabling the target range user to enter a user interface of the flow task scheduling module, inquiring the currently available behavior agents, selecting one behavior agent, and creating a blank flow task plan.
And 6, filling the flow task into the flow task plan generated in the step 5 according to the requirements of the shooting range training scene and the existing behavior flow in the behavior flow library by the shooting range user. One flow task comprises the following elements: task execution time, behavior nodes executed, behavior flow executed, behavior variables set by a user (optional). In this step, the user may choose not to set the behavior variables in the behavior flow; the behavior variables in the set behavior flow can also be selected, so that the specific execution content of the flow task is different from the behavior implemented on the recording module in the step 1.
Specific examples of setting behavior variables are as follows:
taking the web browsing behavior flow as an example, if a step in the flow is to access a web page with a website address a and the website address is marked as a behavior variable, the user can set the website address as another website address b.
Taking the email sending action flow as an example, if a certain step in the flow is sending an email with a text of c to the email address a and the recipient address and the email text are marked as action variables, the user can set the recipient address as another email address b and the email text as d.
Taking the online video watching behavior flow as an example, if a step in the flow chart is to pull a certain RTMP protocol flow, the resource address of the protocol flow is e, and the resource address is marked as a behavior variable, the user can set the pull flow address to another address f.
And 7, the target range user starts the flow mission plan in the step 5.
And 8, creating a timing task by the flow task scheduling module according to the flow task and the execution time of the flow task contained in the flow task plan. The number of timing tasks corresponds to the number of traffic tasks. The timed task will trigger at the execution time of the traffic task.
And 9, when the timing task created in the step 8 is triggered, the flow task arrangement module issues a flow task to the behavior task distribution module.
And step 10, analyzing the received flow tasks by the behavior task distribution module, and downloading the corresponding behavior flow from the behavior flow library. If the user selects the set behavior variable in step 6, modifying the behavior flow according to the behavior variable set by the user.
Specific examples of modifying behavior variables are as follows:
taking the web page browsing action flow as an example, if the user sets the access address of a certain step in the action flow as the address b in the step 6, the access address of the step in the action flow is replaced by b, so that the original step of accessing a in the action flow is replaced by the step of accessing b.
Taking the email sending action flow as an example, if the user sets the address of the email to be sent in the action flow to be the email address b by the user and sets the body of the email to be sent to d in step 6, the address of the email to be sent in the action flow is replaced by the email address b, and the body of the email to be sent is replaced by d, so that the original step of sending the email with the body of c to the email address a in the action flow is replaced by the step of sending the email with the body of d to the email address b.
Taking an online video watching behavior flow as an example, if a user sets a resource address pulled by a certain step in the flow in step 6 to be f, replacing the pulling address of the step in the behavior flow with f, so that the original step of playing the streaming media with the resource address e in the behavior flow is replaced with the step of playing the streaming media with the resource address f.
By replacing the simple behavior variables, the traffic tasks created by the shooting range user each time can generate traffic of different contents without re-recording and writing the behavior flow.
And 11, the behavior task distribution module combines the behavior node information appointed in the flow task to generate a behavior task and transmits the behavior task to the behavior agent module deployed in the appointed behavior node.
And 12, the behavior agent module receives the issued behavior task, analyzes the sequence and time relation between the contained scripts and the scripts, and sequentially and background executes the scripts on the behavior nodes according to the analyzed sequence and time relation, so as to realize network behavior. Network interaction is carried out with the access target through the behavior node to reproduce network behavior, and network traffic naturally occurs on the behavior node, namely, the purpose of generating background traffic in the range network is achieved.
Based on the same inventive concept, the network target range background flow generation system disclosed by the embodiment of the invention comprises a management server and equipment for generating background flow; the management server and the device each include a memory, a processor, and a computer program stored on the memory and executable on the processor, the computer program on the management server being implemented when loaded into the processor: constructing and storing a behavior flow, wherein the behavior flow is a sequence formed by a plurality of behavior steps, the sequence of the behavior steps and the time intervals of adjacent steps; the action step is a section of script, and executing the script initiates an operation capable of generating network traffic once; arranging background flow tasks, wherein the tasks comprise execution time, execution nodes and behavior flows; the execution node is equipment which needs to generate background traffic; downloading a specified behavior flow when the background flow task is triggered, generating a behavior task, and issuing the behavior task to a computer program on a specified execution node; the computer program on the device is implemented when loaded into the processor: and receiving the behavior task, analyzing the behavior flow contained in the behavior task, and executing the script to access the target server according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step, so as to realize network operation and enable the flow to occur on the equipment.

Claims (10)

1. A behavioural agent-based network range background traffic generation system, comprising:
the behavior flow library is used for storing and managing the behavior flow; the behavior flow is a sequence formed by a plurality of behavior steps, the sequence of the behavior steps and the time intervals of adjacent steps; the action step is a section of script, and executing the script initiates an operation capable of generating network traffic once;
the flow task scheduling module is used for performing background flow task scheduling, wherein the tasks comprise execution time, execution nodes and behavior flows;
the behavior task distribution module is used for receiving the background flow task, downloading the specified behavior flow from the behavior flow library, generating the behavior task and transmitting the behavior task to the behavior agent module on the specified execution node;
the behavior agent module is deployed inside the behavior node and is used for receiving the behavior task, analyzing the behavior flow contained in the behavior task, executing script to access the target server according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step in the behavior flow, realizing network operation and enabling the behavior node to generate flow.
2. The behavioral agent-based network range background traffic generation system of claim 1, wherein the behavioral flow library supports copying or editing behavioral flows to generate new behavioral flows; the edited content includes the behavioral steps and the order and time relationships between the behavioral steps.
3. The behavioral agent-based network range background flow generation system of claim 1, wherein the behavioral flow library supports marking text content in scripts of behavioral steps as behavioral variables that can be replaced prior to execution of a behavioral flow to achieve access to different targets or to provide different access parameters.
4. The behavioral agent-based network target range background traffic generation system of claim 3, wherein the traffic task orchestration module supports user-set behavioral variables; and if the behavior variable is set by the user, the behavior task distribution module modifies the behavior flow according to the behavior variable set by the user when generating the behavior task, and replaces the behavior variable.
5. The behavioral agent-based network range background traffic generation system of claim 1, wherein the behavioral node is a virtual machine or a physical device in a range network; the target server is deployed in the intranet of the network target range; or deployed outside the network target, serving the behavior nodes within the network target through the network proxy.
6. The behavioral agent-based network targeting context flow generation system of claim 1 wherein web operations implemented by the script of the behavioral step include browsing web pages, accessing short videos, collecting or sending mail, and uploading or downloading files using an FTP tool; the target server comprises a Web server, a streaming media server, a mail server and an FTP file server.
7. The system of claim 1, further comprising a behavior recording module for providing a user interface for a recorder to perform network operations, and obtaining a network behavior record by obtaining an access history or capturing a traffic packet, so as to assist in the writing of a behavior flow.
8. The network target range background flow generation method based on the behavior agent is characterized by comprising the following steps of:
constructing and storing a behavior flow, wherein the behavior flow is a sequence formed by a plurality of behavior steps, the sequence of the behavior steps and the time intervals of adjacent steps; the action step is a section of script, and executing the script initiates an operation capable of generating network traffic once;
arranging background flow tasks, wherein the tasks comprise execution time, execution nodes and behavior flows;
downloading a specified behavior flow when the background flow task is triggered, generating a behavior task, and issuing the behavior task to a behavior agent on a specified execution node;
the behavior agent receives the behavior task, analyzes the behavior flow contained in the behavior task, and executes the script to access the target server according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step, so as to realize network operation and enable the behavior node to generate flow.
9. The behavioral agent-based network range background flow generation method of claim 8, wherein when constructing a behavioral flow, marking text content in scripts of a behavioral step as behavioral variables that can be replaced before execution of the behavioral flow to achieve access to different targets or provide different access parameters is supported; when background flow tasks are arranged, supporting a user to set behavior variables; and if the behavior variables are set by the user, modifying the behavior flow according to the behavior variables set by the user when the behavior tasks are generated, and replacing the behavior variables.
10. The network target range background flow generation system comprises a management server and equipment for generating background flow; the management server and the device each include a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the computer program on the management server is implemented when loaded into the processor: constructing and storing a behavior flow, wherein the behavior flow is a sequence formed by a plurality of behavior steps, the sequence of the behavior steps and the time intervals of adjacent steps; the action step is a section of script, and executing the script initiates an operation capable of generating network traffic once; arranging background flow tasks, wherein the tasks comprise execution time, execution nodes and behavior flows; the execution node is equipment which needs to generate background traffic; downloading a specified behavior flow when the background flow task is triggered, generating a behavior task, and issuing the behavior task to a computer program on a specified execution node;
the computer program on the device is implemented when loaded into the processor: and receiving the behavior task, analyzing the behavior flow contained in the behavior task, and executing the script to access the target server according to each behavior step in the behavior flow, the sequence and the time interval of each behavior step, so as to realize network operation and enable the flow to occur on the equipment.
CN202310466718.9A 2023-04-27 2023-04-27 Network target range background flow generation system and method based on behavior agent Active CN116208519B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202310466718.9A CN116208519B (en) 2023-04-27 2023-04-27 Network target range background flow generation system and method based on behavior agent

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202310466718.9A CN116208519B (en) 2023-04-27 2023-04-27 Network target range background flow generation system and method based on behavior agent

Publications (2)

Publication Number Publication Date
CN116208519A true CN116208519A (en) 2023-06-02
CN116208519B CN116208519B (en) 2023-08-22

Family

ID=86513210

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202310466718.9A Active CN116208519B (en) 2023-04-27 2023-04-27 Network target range background flow generation system and method based on behavior agent

Country Status (1)

Country Link
CN (1) CN116208519B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117749639A (en) * 2024-02-19 2024-03-22 南京赛宁信息技术有限公司 Automatic network target range flow generation method and system

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018175551A1 (en) * 2017-03-22 2018-09-27 Circadence Corporation Mission-based, game-implemented cyber training system and method
CN113676363A (en) * 2021-10-22 2021-11-19 南京赛宁信息技术有限公司 Network target range flow generation system and method
CN114257506A (en) * 2021-12-21 2022-03-29 北京知道未来信息技术有限公司 Network target range construction method and device, back-end server and readable storage medium
CN115113888A (en) * 2022-07-05 2022-09-27 南京赛宁信息技术有限公司 Target drone upgrading method and system based on template arrangement
CN115714721A (en) * 2022-11-16 2023-02-24 北京丈八网络安全科技有限公司 Network shooting range flow generation method and system
CN116015968A (en) * 2023-01-06 2023-04-25 天津丈八网络安全科技有限公司 Automatic network attack and defense system and method based on simulation environment

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018175551A1 (en) * 2017-03-22 2018-09-27 Circadence Corporation Mission-based, game-implemented cyber training system and method
CN113676363A (en) * 2021-10-22 2021-11-19 南京赛宁信息技术有限公司 Network target range flow generation system and method
CN114257506A (en) * 2021-12-21 2022-03-29 北京知道未来信息技术有限公司 Network target range construction method and device, back-end server and readable storage medium
CN115113888A (en) * 2022-07-05 2022-09-27 南京赛宁信息技术有限公司 Target drone upgrading method and system based on template arrangement
CN115714721A (en) * 2022-11-16 2023-02-24 北京丈八网络安全科技有限公司 Network shooting range flow generation method and system
CN116015968A (en) * 2023-01-06 2023-04-25 天津丈八网络安全科技有限公司 Automatic network attack and defense system and method based on simulation environment

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
周芳 等: "基于模板的网络化信息系统业务流量仿真方法", 指挥信息系统与技术, vol. 7, no. 01, pages 83 - 87 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117749639A (en) * 2024-02-19 2024-03-22 南京赛宁信息技术有限公司 Automatic network target range flow generation method and system
CN117749639B (en) * 2024-02-19 2024-05-31 南京赛宁信息技术有限公司 Automatic network target range flow generation method and system

Also Published As

Publication number Publication date
CN116208519B (en) 2023-08-22

Similar Documents

Publication Publication Date Title
US7464014B2 (en) Server recording and client playback of computer network characteristics
US10657032B2 (en) Systems and methods for monitoring performance of applications
CN113676363B (en) Network target range flow generation system and method
US6654699B2 (en) Computer network testing system and method using client playback of edited network information
CN116208519B (en) Network target range background flow generation system and method based on behavior agent
US10887201B2 (en) Method for automatically monitoring end-to-end end user performance and apparatus for performing the method
US7765096B1 (en) Simulation of network traffic using non-deterministic user behavior models
CN105490854B (en) Real-time logs collection method, system and application server cluster
CN107302475A (en) The method of testing and device of a kind of Based on Distributed storage cluster
CN105898527A (en) Advertisement video splicing method and video server
CN105068876B (en) Method based on distributed deployment prototype collection cell phone application performance data
CN112491652B (en) Network flow sample processing method and device for testing
CN106603296A (en) Log processing method and device
CN110798373A (en) Method for realizing performance test, test server and computer storage medium
CN112732572A (en) Service testing method, device and system, storage medium and electronic device
CN107528751A (en) A kind of system and its management method of dynamic distribution Zabbix monitoring datas
CN114500110B (en) Network shooting range concurrent flow dynamic generation system and method
CN109460333A (en) A kind of function test method of storage system, device and relevant device
KR101199485B1 (en) Method and apparatus for testing online performance on client/server
CN113992553A (en) Platform flow generation system, method, computer and storage medium based on micro-service
CN108494864A (en) A kind of data processing method, device and machine readable storage medium
CN109962946B (en) Method and device for downloading resources
CN113438503B (en) Video file restoring method, device, computer equipment and storage medium
Verma A comparison of web framework efficiency: performance and network analysis of modern web frameworks
Hiorthøy Analyzing and Benchmarking the Performance of Different Cloud Services for Agile App Deployment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant