CN117692230A - Information sharing method, system, electronic device and medium for network attack and defense exercise - Google Patents
Information sharing method, system, electronic device and medium for network attack and defense exercise Download PDFInfo
- Publication number
- CN117692230A CN117692230A CN202311744824.5A CN202311744824A CN117692230A CN 117692230 A CN117692230 A CN 117692230A CN 202311744824 A CN202311744824 A CN 202311744824A CN 117692230 A CN117692230 A CN 117692230A
- Authority
- CN
- China
- Prior art keywords
- task
- information
- exercise
- sharing
- team
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 64
- 230000007123 defense Effects 0.000 title claims abstract description 48
- 238000005553 drilling Methods 0.000 claims abstract description 22
- 238000011156 evaluation Methods 0.000 claims abstract description 22
- 230000008569 process Effects 0.000 claims description 30
- 238000004891 communication Methods 0.000 claims description 7
- 230000003993 interaction Effects 0.000 claims description 7
- 238000013139 quantization Methods 0.000 claims description 3
- 230000000694 effects Effects 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- 238000004590 computer program Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 238000013441 quality evaluation Methods 0.000 description 2
- 238000011002 quantification Methods 0.000 description 2
- 238000013515 script Methods 0.000 description 2
- 238000009825 accumulation Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 230000015572 biosynthetic process Effects 0.000 description 1
- 238000012790 confirmation Methods 0.000 description 1
- 230000001186 cumulative effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000012946 outsourcing Methods 0.000 description 1
- 230000000149 penetrating effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Landscapes
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention provides an information sharing method, system, electronic equipment and medium for network attack and defense exercise, which solve the technical problem that the existing network attack and defense task results cannot be fully utilized for improving the overall capability of a plurality of participants of an enterprise. The method comprises the following steps: the exercise team with the identity of the information publisher publishes the shared information of the exercise task; the exercise team with the identity of the information acquirer inquires shared information of the target exercise task, forms a problem solving resource of the target exercise task according to the shared information, and implements the target exercise task through the problem solving resource; and quantifying the task results of the information acquirer according to the implementation results of the target exercise task, and forming the distribution and evaluation of the task results between the information issuer and the information acquirer according to the sharing exchange rules. And sharing, evaluating and adding the technical details among the drilling teams with different technical grades through orderly distribution of platform achievements, and establishing good technical resource circulation and drilling ecology.
Description
Technical Field
The invention relates to the technical field of network security, in particular to an information sharing method, an information sharing system, electronic equipment and a medium in network attack and defense event exercise.
Background
With the development of network security work, network attack and defense exercises and the like in various industries are orderly developed, and the network attack and defense have become important measures for improving network security and network elasticity by industry units. In the prior art, in short-term network attack and defense exercise, a good exercise effect is required, and a large number of high-quality attack/defense security personnel are involved in the mode of assault outsourcing, which is not economically cost-effective.
The practical exercise effect is not ideal. The method is mainly characterized in that the current attack and defense are only conducted, no requirement is made on a specific implementation path, a large number of operation nodes are involved in attack and defense, so that the attack and defense are only known to be trapped or no vulnerability invades, but attack and defense implementation details are not well reproduced, the process of disassembling and explaining the attack and defense detailed details/important operation nodes is not carried out, and general participators cannot understand the attack and defense detailed details/important operation nodes. The network attack and defense exercise in a short time can not form the maximum utilization of attack/defense results and skills, has limited gradual improvement effect on the whole attack/defense capability of a plurality of participants of an enterprise, and is beneficial to limited enterprise network security teams.
Disclosure of Invention
In view of the above problems, the embodiments of the present invention provide an information sharing method, system, electronic device and medium for network attack and defense exercise, which solve the technical problem that the existing network attack and defense task results cannot be fully utilized for improving the overall capability of numerous participants of an enterprise.
The information sharing method for network attack and defense exercise provided by the embodiment of the invention comprises the following steps:
the exercise team with the identity of the information publisher publishes the sharing information of the exercise task, wherein the sharing information comprises a task sharing type, task detail description and a sharing exchange rule;
the exercise team with the identity of the information acquirer inquires shared information of the target exercise task, forms problem solving resources of the target exercise task according to the shared information, and implements the target exercise task through the problem solving resources;
and quantifying the task results of the information acquirer according to the implementation results of the target exercise task, and forming the distribution and evaluation of the task results between the information issuer and the information acquirer according to the sharing exchange rules.
In an embodiment of the present invention, the publishing of the shared information of the exercise task by the exercise team with the identity of the information publisher includes:
determining a task sharing type to be provided for task achievements according to exercise tasks, implementation processes and implementation achievements participated by an exercise team, and determining the task sharing type to be help for the exercise tasks according to a user-defined problem solving request description provided by the exercise team;
forming task detail description according to basic information, attack/defense process and acquired information of the exercise task implementation process;
forming an active sharing exchange rule according to the utilization rule of the task result and the distribution rule of the platform quantization score of the task result;
and forming shared information and information abstracts of different task sharing types according to the task sharing types, the task detail description and the sharing exchange rules.
In an embodiment of the present invention, the publishing of the shared information of the exercise task by the exercise team with the identity of the information publisher includes:
determining a task sharing type to be provided for task achievements according to exercise tasks, implementation processes and implementation achievements participated by an exercise team, and determining the task sharing type to be help for the exercise tasks according to a user-defined problem solving request description provided by the exercise team;
the task detail description of the custom solving task forms task detail description;
the user-defined other people respond to the user-defined problem solving task to provide a score distribution rule of a task result and a utilization rule of the task result to form a passive sharing exchange rule;
and forming shared information and information abstracts of different task sharing types according to the task sharing types, the task detail description and the sharing exchange rules.
In an embodiment of the present invention, the exercise team with the identity of the information acquirer queries the shared information of the target exercise task, forms a solution resource of the target exercise task according to the shared information, and implements the target exercise task through the solution resource, including:
the exercise team determines sharing information required by the target exercise task according to the information abstract;
and forming problem solving resources according to the shared information, and utilizing ladder resources in the implementation of the target exercise task to timely establish information interaction with the information publisher.
In an embodiment of the present invention, the step of quantifying the task result of the information acquirer according to the implementation result of the target exercise task, and forming the distribution and evaluation of the task result between the information issuer and the information acquirer according to the sharing exchange rule includes:
after the target exercise task is completed to form the equivalent score of the task result, automatically splitting the equivalent score according to the sharing exchange rule and distributing the equivalent score to the information publisher;
and after the equivalent score of the task result is split and distributed to the information publisher, updating the information abstract of the shared information through the system statistical information and the information acquirer evaluation information.
The information sharing system for network attack and defense exercise of the embodiment of the invention comprises the following components:
the information sharing device is used for issuing shared information of the exercise task by the exercise team with the identity of the information issuing party, and the shared information comprises a task sharing type, task detail description and a sharing exchange rule;
the information acquisition device is used for inquiring shared information of the target drilling task by the drilling team with the identity of the information acquisition party, forming problem solving resources of the target drilling task according to the shared information, and implementing the target drilling task through the problem solving resources;
and the information iteration device is used for quantifying the task result of the information acquirer according to the implementation result of the target exercise task and forming the distribution and evaluation of the task result between the information issuer and the information acquirer according to the sharing exchange rule.
The electronic equipment of the embodiment of the invention comprises:
a processor, a memory, an interface in communication with the gateway;
the memory is used for storing programs and data, and the processor calls the programs stored in the memory to execute the method.
The computer readable storage medium of an embodiment of the present invention includes a program for executing the above-described method when executed by a processor.
According to the information sharing method, system, electronic equipment and medium for network attack and defense exercise, after exercise tasks are implemented to finish the problem solving contents, platform achievements are orderly distributed among exercise teams of different technical grades to form sharing, evaluation and increment of technical details, so that orderly flow of high-quality problem solving resources is formed. The technology sharing is used for forming the landing and participation of the network attack and defense exercise, so that the general promotion of the technical level of vast participators is realized, the substantial technical communication is formed through the technical evaluation, the technical increment is formed through the score distribution between the two parties, and the good technical resource circulation and exercise ecology is established.
Drawings
Fig. 1 is a flow chart of an information sharing method for network attack and defense exercise according to an embodiment of the invention.
Fig. 2 is a flow chart illustrating a specific application process of an information sharing method for network attack and defense exercise according to an embodiment of the present invention.
Fig. 3 is a schematic diagram of an architecture of an information sharing system for network attack and defense exercise according to an embodiment of the invention.
Fig. 4 is a schematic diagram of an architecture of an electronic device according to an embodiment of the invention.
Detailed Description
The present invention will be further described with reference to the drawings and the detailed description below, in order to make the objects, technical solutions and advantages of the present invention more apparent. It will be apparent that the described embodiments are only some, but not all, embodiments of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The information sharing method for network attack and defense exercise according to an embodiment of the present invention is shown in fig. 1. In fig. 1, this embodiment includes:
step 100: the exercise team with the identity of the information publisher publishes the sharing information of the exercise task, wherein the sharing information comprises a task sharing type, task detail description and a sharing exchange rule.
The number of persons and specialized literacy of the exercise team is not limited, and includes, but is not limited to, outside professional on-line team, in-line team, single department on-line team, combined department on-line team, or individuals qualified for network An Yunwei, etc. In the sharing information, the task sharing type is used to distinguish whether the exercise team is provided as a task (solution) result or the exercise task resort. Aiming at task achievements, task detail description is used for forming quantitative description data of breakthrough positions, principle methods, tools, implementation processes and the like in the problem solving process; aiming at the help of the exercise task, the task detail description is used for forming breakthrough positions, principle methods, tools and equivalent requirement explanation of the implementation process in the problem solving process. Aiming at task achievements, sharing exchange rules are used for providing use limiting rules such as timeliness of achievements, exchange rules of acting fields and other exercise teams for utilizing achievements; for help on a drilling task, the shared redemption rules are used to provide answer validity judgment rules, redemption rules with answers, and the like, usage definition rules.
Step 200: and the exercise team with the identity of the information acquirer inquires the shared information of the target exercise task, forms a problem solving resource of the target exercise task according to the shared information, and implements the target exercise task through the problem solving resource.
The target drilling task may include shared information provided by different information publishers. The information acquirer acquires evaluation information such as information reference times, quality evaluation, exchange conditions and the like according to the information abstract of the shared information to determine the utilized shared information. The information acquirer forms a problem solving resource to develop a problem solving process aiming at the target drilling task through the determined shared information.
Step 300: and quantifying the task results of the information acquirer according to the implementation results of the target exercise task, and forming the distribution and evaluation of the task results between the information issuer and the information acquirer according to the sharing exchange rules.
The exercise team of the information acquirer identity can acquire the quantized score of the platform to be used as a basis for rewarding or evaluating task results after the exercise task is implemented by using the problem solving resource to complete problem solving content. The quantitative score is distributed between the information publisher and the information acquirer according to the sharing exchange rule in the shared information to form key factors for evaluating the quality of the shared information and the technical literacy of the information publisher, and the technical literacy of the information publisher can be formed according to the number of the shared information, the number of times of adoption of the shared information and other attributes, and the evaluation information of the information acquirer can also form the quality evaluation of the shared information.
According to the information sharing method for network attack and defense exercise, platform achievements are orderly distributed among exercise teams of different technical grades after exercise tasks are implemented to complete the problem solving content, so that sharing, evaluation and increment of technical details are formed, and high-quality problem solving resources are orderly flowed. The technology sharing is used for forming the landing and participation of the network attack and defense exercise, so that the general promotion of the technical level of vast participators is realized, the substantial technical communication is formed through the technical evaluation, the technical increment is formed through the score distribution between the two parties, and the good technical resource circulation and exercise ecology is established.
As shown in fig. 1, in an embodiment of the present invention, step 100 includes:
step 110: and determining the task sharing type as the exercise task recourse according to the exercise task, the implementation process and the implementation result participated by the exercise team, and providing the task result and determining the task sharing type as the exercise task recourse according to the user-defined question solving request description provided by the exercise team.
The task achievements provide type sharing information, implementation processes of the exercise tasks defined by a sharing platform or the exercise task seeker and sharing exchange rules. Sharing information of the help type of the exercise task, and sharing the custom exercise task description.
Step 120: and forming task detail description according to the basic information, the attack/defense process and the acquired information of the exercise task implementation process.
The task detail description includes:
the basic information includes system environment, IP address, vulnerability name, vulnerability path, vulnerability level, etc.
The attack process includes breaking point, penetrating required script, tool, realizing content, etc.
The acquired information comprises system parameters, account types, account usage, data types, data usage and the like.
Step 130: and forming an active sharing exchange rule according to the utilization rule of the task result and the distribution rule of the platform quantification score (numerical value) of the task result.
The usage rules include limiting the scope of use, limiting the time conditions, etc. Allocation rules include, for example, scaling, or fixed score setting, etc. The information acquirer promises to use and return the scores according to the rules.
Step 140: the task detail description of the custom solving task forms a task detail description.
The custom process is performed according to the problem setting specification of the exercise task. The custom process forms a standard task of solving questions that can be used as a drilling task.
Step 150: the user-defined other person responds to the user-defined problem solving task to provide a score distribution rule of a task result and a utilization rule of the task result to form a passive sharing exchange rule.
The allocation rule can be aimed at a pre-count value, and the pre-count value can be a platform quantification value obtained after the task is performed by using the complete platform of the task achievements of other people. Utilization rules define the promise and use scenarios for other people's task achievements.
Step 160: and forming shared information and information abstracts of different task sharing types according to the task sharing types, the task detail description and the sharing exchange rules.
The message digest includes, but is not limited to, a raw description of the usage profile, contact and redemption rule profile for the shared message. Further included are updatable statistics based on utilization status for the task outcome, including but not limited to, rating information, cumulative obtained scores, number of times employed, and like historical information.
The information sharing method for the network attack and defense exercise forms a data base of task result management and exercise task management of an exercise team. And binding the exercise task and the task result by using the form of shared information. And a customizable shared exchange mechanism for the task achievement to be utilized among the drill teams is provided. The enterprise can develop network attack and defense exercises with available high-quality data accumulation, and the effectiveness of improving the participation degree and skills of the personnel on the competition floor is promoted.
As shown in fig. 1, in an embodiment of the present invention, step 200 includes:
step 210: and the exercise team determines shared information required by the target exercise task according to the information abstract.
The exercise team as the information acquirer confirms the required sharing information through the information abstract and also confirms the sharing exchange rule of the information publisher.
Step 220: and forming problem solving resources according to the shared information, and utilizing ladder resources in the implementation of the target exercise task to timely establish information interaction with the information publisher.
Complete solution resources in the shared information include, but are not limited to, threads, ideas, skills, important resource nodes, vulnerability locations, required tools, scripts, etc. The information interaction is performed through an interaction tool provided by the drilling platform.
The information sharing method for network attack and defense exercise forms an application mechanism for sharing information. And forming a general drilling flow for establishing resource positioning, rule confirmation, resource formation and resource utilization according to the shared information of the target drilling task. And a timely information interaction path and an automatic achievement exchange path are formed between the information acquisition party and the information release party. The task result management of the drilling team and the orderly progress of the drilling task management are ensured. And a data basis for subsequent analysis is provided for the attack and defense exercise time process of the participants.
As shown in fig. 1, in an embodiment of the present invention, step 300 includes:
step 310: after the target drilling task is completed to form the equivalent score of the task result, the equivalent score is automatically split according to the sharing exchange rule and distributed to the information publisher.
Step 320: and after the equivalent score of the task result is split and distributed to the information publisher, updating the information abstract of the shared information through the system statistical information and the information acquirer evaluation information.
The information abstract of the updated shared information comprises historical data such as evaluation information added by an information acquirer, accumulated obtained scores of system statistics, adopted times and the like, so that other people can refer to the historical data.
The specific application process of the information sharing method for network attack and defense exercise according to an embodiment of the invention is shown in fig. 2. In fig. 2, an exercise team is used as an information publisher to write the shared information content of the whole exercise process of the exercise task after the exercise task is completed, and the issue of the problem solving shared information of the exercise task is formed by perfecting the problem association, the task result ladder score verification, the task information issue type, the task stage detail description, the shared information value exchange rule and the distribution limit utilization rule. And an exercise team is used as an information acquisition party to consult an information abstract of the shared information related to the target problem solving task to acquire basic information and history information, and acquire problem solving resources in the shared information to carry out the implementation process of the exercise task after agreeing to the exchange rules in the information payment mode. And paying information consideration after the task result is successfully obtained after the implementation process of the exercise task is completed. And evaluating the shared information to form incremental evaluation information for updating the information abstract. The information abstract reflects the history data of the exercise team of the information publisher and is used for objective evaluation of shared information by the subsequent information acquirer.
The information sharing system for network attack and defense exercise according to an embodiment of the present invention is shown in fig. 3. In fig. 3, the present embodiment includes:
an information sharing device 10 for a drilling team having an information publisher to publish shared information of drilling tasks, the shared information including a task sharing type, a task detail description, and a sharing exchange rule;
the information acquisition device 20 is used for inquiring shared information of the target exercise task by the exercise team with the identity of the information acquirer, forming a question solving resource of the target exercise task according to the shared information, and implementing the target exercise task through the question solving resource;
and the information iteration device 30 is used for quantifying the task result of the information acquirer according to the implementation result of the target exercise task and forming the distribution and evaluation of the task result between the information issuer and the information acquirer according to the sharing exchange rule.
As shown in fig. 3, in an embodiment of the present invention, the information sharing apparatus 10 includes:
the type definition module 11 is used for determining a task sharing type to be provided for a task result according to an exercise task, an implementation process and an implementation result participated by an exercise team, and determining the task sharing type to be a help for the exercise task according to a user-defined question solving request description provided by the exercise team;
a first detail module 12, configured to form a task detail description according to basic information, attack/defense process and acquisition information of the exercise task implementation process;
a first rule module 13, configured to form an active sharing redemption rule according to a utilization rule of the task result and an allocation rule of a platform quantization score (numerical value) of the task result;
a second detail module 14, configured to form a task detail description from the task detail description of the custom solution;
the second rule module 15 is used for forming a passive sharing exchange rule by using a distribution rule of a task result provided by a user-defined other person responding to the user-defined problem solving task and a utilization rule of the task result;
the information generating module 16 is configured to form shared information and information summaries of different task sharing types according to the task sharing types, task detail descriptions and the sharing exchange rules.
As shown in fig. 3, in an embodiment of the present invention, the information acquisition apparatus 20 includes:
an information matching module 21, configured to determine, by the exercise team, shared information required for a target exercise task according to the information abstract;
the information utilization module 22 is configured to form a problem solving resource according to the shared information, and to use the ladder resource in implementing the target exercise task to timely establish information interaction with the information publisher.
As shown in fig. 3, in an embodiment of the present invention, the information iterating apparatus 30 includes:
the rule fulfilling module 31 is configured to automatically split the equivalent score according to the sharing exchange rule and distribute the split value to the information publisher after completing the target exercise task to form the equivalent score of the task result;
and the abstract updating module 32 is used for splitting and distributing the equivalent scores of the completed task achievements to the information issuing party and updating the information abstract of the shared information through the system statistical information and the information acquisition party evaluation information.
The embodiment of the present application further provides a specific implementation manner of an electronic device capable of implementing all the steps in the method in the foregoing embodiment, and referring to fig. 4, the electronic device 600 specifically includes the following:
processor 610, memory 620, communication unit 630, and bus 640;
wherein processor 610, memory 620, and communication unit 630 communicate with each other via bus 640; the communication unit 630 is configured to implement information transmission between the server-side device and the terminal device.
The processor 610 is configured to invoke a computer program in the memory 620, and when the processor executes the computer program, implement all the steps in the information sharing method for network attack and defense exercise in the above embodiment.
Those of ordinary skill in the art will appreciate that: the Memory may be, but is not limited to, random access Memory (Random Access Memory; RAM; ROM; programmable Read-Only Memory; PROM; erasable ROM; erasable Programmable Read-Only Memory; EPROM; electrically erasable ROM; electric Erasable Programmable Read-Only Memory; EEPROM; etc.). The memory is used for storing a program, and the processor executes the program after receiving the execution instruction. Further, the software programs and modules within the memory may also include an operating system, which may include various software components and/or drivers for managing system tasks (e.g., memory management, storage device control, power management, etc.), and may communicate with various hardware or software components to provide an operating environment for other software components.
The processor may be an integrated circuit chip with signal processing capabilities. The processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, abbreviated as CPU), a Network Processor (NP), and the like. The disclosed methods, steps, and logic blocks in the embodiments of the present application may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The present application also provides a computer readable storage medium comprising a program which, when executed by a processor, is configured to perform the information sharing method of network attack and defense exercise provided by any of the foregoing method embodiments.
Those of ordinary skill in the art will appreciate that: all or part of the steps for implementing the method embodiments described above may be performed by hardware associated with program instructions. The foregoing program may be stored in a computer readable storage medium. The program, when executed, performs steps including the method embodiments described above; and the aforementioned storage medium includes: various media may store program code, such as ROM, RAM, magnetic or optical disks, and the specific type of media is not limiting in this application.
The present invention is not limited to the above-mentioned embodiments, and any changes or substitutions that can be easily understood by those skilled in the art within the technical scope of the present invention are intended to be included in the scope of the present invention. Therefore, the protection scope of the present invention should be subject to the protection scope of the claims.
Claims (8)
1. The information sharing method for the network attack and defense exercise is characterized by comprising the following steps of:
the exercise team with the identity of the information publisher publishes the sharing information of the exercise task, wherein the sharing information comprises a task sharing type, task detail description and a sharing exchange rule;
the exercise team with the identity of the information acquirer inquires shared information of the target exercise task, forms problem solving resources of the target exercise task according to the shared information, and implements the target exercise task through the problem solving resources;
and quantifying the task results of the information acquirer according to the implementation results of the target exercise task, and forming the distribution and evaluation of the task results between the information issuer and the information acquirer according to the sharing exchange rules.
2. The information sharing method of network attack and defense exercise according to claim 1, wherein the exercise team with the identity of the information publisher publishes the shared information of the exercise task, comprising:
determining a task sharing type to be provided for task achievements according to exercise tasks, implementation processes and implementation achievements participated by an exercise team, and determining the task sharing type to be help for the exercise tasks according to a user-defined problem solving request description provided by the exercise team;
forming task detail description according to basic information, attack/defense process and acquired information of the exercise task implementation process;
forming an active sharing exchange rule according to the utilization rule of the task result and the distribution rule of the platform quantization score of the task result;
and forming shared information and information abstracts of different task sharing types according to the task sharing types, the task detail description and the sharing exchange rules.
3. The information sharing method of network attack and defense exercise according to claim 1, wherein the exercise team with the identity of the information publisher publishes the shared information of the exercise task, comprising:
determining a task sharing type to be provided for task achievements according to exercise tasks, implementation processes and implementation achievements participated by an exercise team, and determining the task sharing type to be help for the exercise tasks according to a user-defined problem solving request description provided by the exercise team;
the task detail description of the custom solving task forms task detail description;
the user-defined other people respond to the user-defined problem solving task to provide a score distribution rule of a task result and a utilization rule of the task result to form a passive sharing exchange rule;
and forming shared information and information abstracts of different task sharing types according to the task sharing types, the task detail description and the sharing exchange rules.
4. The information sharing method of network attack and defense exercise according to claim 1, wherein the exercise team with the identity of the information acquirer queries the shared information of the target exercise task, forms a solution resource of the target exercise task according to the shared information, and implements the target exercise task through the solution resource, comprising:
the exercise team determines sharing information required by the target exercise task according to the information abstract;
and forming problem solving resources according to the shared information, and utilizing ladder resources in the implementation of the target exercise task to timely establish information interaction with the information publisher.
5. The information sharing method of network attack and defense exercise according to claim 1, wherein the step of quantifying the task results of the information acquirer according to the implementation results of the target exercise task, and forming the distribution and evaluation of the task results between the information issuer and the information acquirer according to the sharing exchange rule comprises:
after the target exercise task is completed to form the equivalent score of the task result, automatically splitting the equivalent score according to the sharing exchange rule and distributing the equivalent score to the information publisher;
and after the equivalent score of the task result is split and distributed to the information publisher, updating the information abstract of the shared information through the system statistical information and the information acquirer evaluation information.
6. An information sharing system for network attack and defense exercise, which is characterized by comprising:
the information sharing device is used for issuing shared information of the exercise task by the exercise team with the identity of the information issuing party, and the shared information comprises a task sharing type, task detail description and a sharing exchange rule;
the information acquisition device is used for inquiring shared information of the target drilling task by the drilling team with the identity of the information acquisition party, forming problem solving resources of the target drilling task according to the shared information, and implementing the target drilling task through the problem solving resources;
and the information iteration device is used for quantifying the task result of the information acquirer according to the implementation result of the target exercise task and forming the distribution and evaluation of the task result between the information issuer and the information acquirer according to the sharing exchange rule.
7. An electronic device, comprising:
a processor, a memory, an interface in communication with the gateway;
the memory is used for storing programs and data, and the processor calls the programs stored in the memory to execute the method according to any one of claims 1 to 5.
8. A computer readable storage medium, characterized in that the computer readable storage medium comprises a program for performing the method of any of claims 1 to 5 when being executed by a processor.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311744824.5A CN117692230A (en) | 2023-12-18 | 2023-12-18 | Information sharing method, system, electronic device and medium for network attack and defense exercise |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311744824.5A CN117692230A (en) | 2023-12-18 | 2023-12-18 | Information sharing method, system, electronic device and medium for network attack and defense exercise |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN117692230A true CN117692230A (en) | 2024-03-12 |
Family
ID=90135041
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202311744824.5A Pending CN117692230A (en) | 2023-12-18 | 2023-12-18 | Information sharing method, system, electronic device and medium for network attack and defense exercise |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117692230A (en) |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101741642A (en) * | 2009-12-17 | 2010-06-16 | 北京航空航天大学 | Task deployment system for distributed simulation of computer network attack and defense training |
| CN111309432A (en) * | 2018-12-12 | 2020-06-19 | 阿里巴巴集团控股有限公司 | Fault drilling method, device and system |
| US20200358715A1 (en) * | 2019-05-06 | 2020-11-12 | Hongfujin Precision Electronics (Zhengzhou) Co., Ltd. | Resource sharing method, computer device, and storage medium |
| WO2021036521A1 (en) * | 2019-08-30 | 2021-03-04 | 中国移动通信有限公司研究院 | Information sharing method, apparatus, system, electronic device, and storage medium |
| US10990432B1 (en) * | 2017-11-30 | 2021-04-27 | Ila Corporation | Method and system for interactive cyber simulation exercises |
| CN113780974A (en) * | 2021-08-09 | 2021-12-10 | 北京永信至诚科技股份有限公司 | Network security service management and control system |
| CN113822582A (en) * | 2021-09-24 | 2021-12-21 | 南方电网科学研究院有限责任公司 | Attack and defense drilling system of network shooting range |
| US20230036694A1 (en) * | 2019-12-24 | 2023-02-02 | Nchain Licensing Ag | Destination addressing for transactions associated with a distributed ledger |
| CN115694970A (en) * | 2022-10-28 | 2023-02-03 | 南方电网科学研究院有限责任公司 | Network security attack and defense drilling system, method and readable storage medium |
| CN116962057A (en) * | 2023-07-31 | 2023-10-27 | 内蒙古自治区广播电视监测与发展中心 | Multi-user collaborative network security emergency response and exercise platform and operation method thereof |
-
2023
- 2023-12-18 CN CN202311744824.5A patent/CN117692230A/en active Pending
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101741642A (en) * | 2009-12-17 | 2010-06-16 | 北京航空航天大学 | Task deployment system for distributed simulation of computer network attack and defense training |
| US10990432B1 (en) * | 2017-11-30 | 2021-04-27 | Ila Corporation | Method and system for interactive cyber simulation exercises |
| CN111309432A (en) * | 2018-12-12 | 2020-06-19 | 阿里巴巴集团控股有限公司 | Fault drilling method, device and system |
| US20200358715A1 (en) * | 2019-05-06 | 2020-11-12 | Hongfujin Precision Electronics (Zhengzhou) Co., Ltd. | Resource sharing method, computer device, and storage medium |
| WO2021036521A1 (en) * | 2019-08-30 | 2021-03-04 | 中国移动通信有限公司研究院 | Information sharing method, apparatus, system, electronic device, and storage medium |
| US20230036694A1 (en) * | 2019-12-24 | 2023-02-02 | Nchain Licensing Ag | Destination addressing for transactions associated with a distributed ledger |
| CN113780974A (en) * | 2021-08-09 | 2021-12-10 | 北京永信至诚科技股份有限公司 | Network security service management and control system |
| CN113822582A (en) * | 2021-09-24 | 2021-12-21 | 南方电网科学研究院有限责任公司 | Attack and defense drilling system of network shooting range |
| CN115694970A (en) * | 2022-10-28 | 2023-02-03 | 南方电网科学研究院有限责任公司 | Network security attack and defense drilling system, method and readable storage medium |
| CN116962057A (en) * | 2023-07-31 | 2023-10-27 | 内蒙古自治区广播电视监测与发展中心 | Multi-user collaborative network security emergency response and exercise platform and operation method thereof |
Non-Patent Citations (2)
| Title |
|---|
| 李向阳，谭剑，马晓雅: "铁路网络安全攻防实战演练研究", 《 铁路计算机应用》, 25 November 2022 (2022-11-25) * |
| 马宜东: "在攻防演练中提升网络防御能力", 《网络安全和信息化》, 5 April 2023 (2023-04-05) * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109074538A (en) | Digital employee is created in the tissue | |
| Ouyang et al. | Learning markets: An AI collaboration framework based on blockchain and smart contracts | |
| CN106961481B (en) | Bad asset information sharing method and server based on block chain technology | |
| Jiang et al. | Smart contract-based data commodity transactions for industrial Internet of Things | |
| CN108932649A (en) | A kind of digital asset method of commerce, system and storage medium based on block chain | |
| CN102279947A (en) | Auditing crowd-sourced competition submissions | |
| Lieckens et al. | Network and contract optimization for maintenance services with remanufacturing | |
| Wessling et al. | Towards blockchain tactics: Building hybrid decentralized software architectures | |
| Bollhorn et al. | Production Network Knowledge as A Foundation for Resistance‐Workers Influence on A Chinese Acquisition in Germany | |
| Li et al. | The stochastic evolution game of knowledge sharing in the infrastructure PPP supply chain network | |
| Vanhoucke et al. | Stability of Earned Value Management-Do project characteristics influence the stability moment of the cost and schedule performance index | |
| Nishihara | Valuation of R&D investment under technological, market, and rival preemption uncertainty | |
| CN115456603A (en) | Double-chain structure-based approval process processing method and device | |
| CN108537664B (en) | Method and server for publishing stock market analysis information based on block chain technology | |
| Alam et al. | Risk-based testing techniques: a perspective study | |
| Yuan et al. | Lightweight and reliable decentralized reward system using blockchain | |
| CN117692230A (en) | Information sharing method, system, electronic device and medium for network attack and defense exercise | |
| CN111311102A (en) | Resource ratio adjusting method, device, equipment and computer readable storage medium | |
| CN112926781A (en) | Market subject behavior map intelligent analysis method and system based on supervision field | |
| CN113240530A (en) | Financing method and equipment based on block chain intelligent contract technology | |
| CN110570296A (en) | Risk assessment method and device in credit project | |
| Schwartz et al. | Evaluating investments in disruptive technologies | |
| Wierzbicki et al. | Fairness emergence in reputation systems | |
| Menon et al. | Beyond Related Experience: Upstream versus Downstream Experience in Innovation Contest Platforms with Interdependent Problem Domains | |
| CN109377160A (en) | A kind of method and apparatus of information processing |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |