CN117709077A - Simulation deduction method and system based on network target range, electronic equipment and medium - Google Patents
Simulation deduction method and system based on network target range, electronic equipment and medium Download PDFInfo
- Publication number
- CN117709077A CN117709077A CN202311620231.8A CN202311620231A CN117709077A CN 117709077 A CN117709077 A CN 117709077A CN 202311620231 A CN202311620231 A CN 202311620231A CN 117709077 A CN117709077 A CN 117709077A
- Authority
- CN
- China
- Prior art keywords
- simulation
- deduction
- simulation deduction
- forming
- logic
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000004088 simulation Methods 0.000 title claims abstract description 276
- 238000000034 method Methods 0.000 title claims abstract description 114
- 230000008569 process Effects 0.000 claims abstract description 77
- 238000013515 script Methods 0.000 claims abstract description 74
- 238000004458 analytical method Methods 0.000 claims abstract description 12
- 230000006399 behavior Effects 0.000 claims description 17
- 238000012545 processing Methods 0.000 claims description 12
- 238000012544 monitoring process Methods 0.000 claims description 9
- 238000004891 communication Methods 0.000 claims description 5
- 230000008685 targeting Effects 0.000 claims 1
- 238000012795 verification Methods 0.000 abstract description 11
- 238000010276 construction Methods 0.000 abstract description 6
- 238000005516 engineering process Methods 0.000 abstract description 4
- 238000013507 mapping Methods 0.000 abstract description 2
- 238000007726 management method Methods 0.000 description 21
- 230000006870 function Effects 0.000 description 8
- 230000003993 interaction Effects 0.000 description 5
- 238000013523 data management Methods 0.000 description 4
- 230000008901 benefit Effects 0.000 description 3
- 238000010586 diagram Methods 0.000 description 3
- 239000012634 fragment Substances 0.000 description 3
- 230000006978 adaptation Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 2
- 238000004590 computer program Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 238000005259 measurement Methods 0.000 description 2
- 238000011002 quantification Methods 0.000 description 2
- 238000013468 resource allocation Methods 0.000 description 2
- 238000009825 accumulation Methods 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 238000012790 confirmation Methods 0.000 description 1
- 239000000470 constituent Substances 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000010030 laminating Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000004445 quantitative analysis Methods 0.000 description 1
- 238000013139 quantization Methods 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000001960 triggered effect Effects 0.000 description 1
Landscapes
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention provides a simulation deduction method, a system, electronic equipment and a medium based on a network target range, which solve the technical problem that the existing simulation deduction cannot fully utilize the network target range resources. The method comprises the following steps: defining service scenes, participating users, service events and setting tasks in the simulation deduction process to form membership and inherent behavior logic among simulation objects; forming an execution script of the set task according to the sequential logic nodes and the branch logic nodes; performing simulation deduction resource scheduling, and adjusting a simulation deduction process by executing a script; performing simulation deduction in a simulation deduction scene, and forming simulation deduction feedback data according to the simulation deduction progress; and (5) carrying out key index analysis and display. By means of simulation objectification and simulation deduction process scripting of the service scene, virtual service scene construction of the service event is achieved by directly utilizing the virtualization technology of the network target range, and deduction and verification of the complex service event can be conducted by directly mapping the actual service scene.
Description
Technical Field
The invention relates to the technical field of network security, in particular to a simulation deduction method, a system, electronic equipment and a medium based on a network target range.
Background
In the prior art, a network target range has become an indispensable virtualization technical means for a management unit to conduct network space security research, verification, deduction and the like on a key information infrastructure. The network target field can provide application of the laminating industry to form a virtual scene, and fine countermeasure treatment measures can be formulated for network events.
Most of traditional system simulation deductions are based on an HLA (high-level architecture) technical framework, and can be used for system simulation of a complex system, but technical elements such as rules, object model templates, interface specifications and the like and a basic service support framework RTI are required to be formed in advance so as to form information interaction of all levels. However, the application of an HLA (high-rise architecture) technical framework in the field of network space safety protection has the defects of long construction period of a basic service support framework, poor flexibility of technical element definition and the like, and the parallel simulation technology of a network target range cannot be fully utilized to form a large-scale simulation scene construction so as to meet intelligent simulation.
Disclosure of Invention
In view of the above problems, the embodiments of the present invention provide a method, a system, an electronic device, and a medium for simulation deduction based on a network target range, which solve the technical problem that the existing simulation deduction cannot fully utilize the network target range resources.
The simulation deduction method based on the network target range provided by the embodiment of the invention comprises the following steps:
defining a service scene, participating users, service events and setting tasks in the simulation deduction process according to the actual service, forming setting simulation objects according to the definition, establishing membership relations among the simulation objects, and forming inherent behavior logic of the simulation objects;
forming sequential logic nodes and branch logic nodes according to deduction logic of the set tasks, configuring parameters of simulation objects according to logic node types, and forming execution scripts of the set tasks according to the sequential logic nodes and the branch logic nodes;
according to the application of the simulation deduction resources for forming the business event by the execution script, performing simulation deduction resource scheduling, and adjusting the simulation deduction process by the execution script;
performing simulation deduction according to a simulation deduction scene of a service event formed by scheduling the simulation deduction resources, and forming simulation deduction feedback data according to a simulation deduction progress;
and carrying out key index analysis and display on the feedback data.
In an embodiment of the present invention, the defining of the service scenario, the participating user, the service event and the setting task in the process of performing simulation deduction according to the actual service forms a setting simulation object according to the definition, establishes a membership between the simulation objects, and forms an inherent behavior logic of the simulation object includes:
forming a service scene definition corresponding to the actual service;
forming definitions of scene resources, user types and business events in the business scene;
defining scene resources, user types and membership of business events and internal behavior logic.
In an embodiment of the present invention, the forming the sequential logic node and the branch logic node according to the deduction logic of the set task, configuring parameters of the simulation object according to the logic node type, and forming the execution script of the set task according to the sequential logic node and the branch logic node includes:
carrying out event splitting on the set task to form an independent service event, and forming a sequential logic node and a branch logic node according to the execution logic of the independent service event;
forming processing logic data, resource reference data and service continuation data of the user participation service in the sequential logic node;
forming branch logic data, judgment logic data and business state feedback data of the business in the branch logic node;
and forming a main process execution script through the sequential logic nodes, setting a task expected target in a main process deduction script, and forming an extension process execution script through the branch logic nodes.
In an embodiment of the present invention, the performing a simulation deduction resource scheduling according to a simulation deduction resource application for forming a service event by executing a script, and adjusting the simulation deduction process by executing the script includes:
performing simulation deduction scene recognition and simulation deduction event recognition on an execution script for performing simulation deduction resource application, and matching with a simulation history accumulated resource;
when the matching resources exist, acquiring simulation deduction data of event deduction feedback in a corresponding virtual scene in the history accumulated resources;
when the matching resources do not exist, issuing an execution script to the network target field to request simulation deduction resources, and receiving simulation deduction data fed back by the network target field;
and controlling the issuing time sequence of the execution script to control the simulation deduction progress, and adjusting the simulation deduction process according to the scheduling data of the execution script.
In an embodiment of the present invention, the forming the simulation deduction feedback data according to the simulation deduction progress includes:
performing simulation deduction scene management through a network target range;
simulation deduction data monitoring is carried out through a network target range;
and obtaining feedback data of simulation deduction through the network target range.
In an embodiment of the present invention, the analyzing and displaying the key indicator of the feedback data includes:
the feedback data is associated with the scene and the event in a time sequence manner and stored to form simulation history accumulated resource update;
and comparing with the task setting target, and forming data display.
The simulation deduction system based on the network shooting range provided by the embodiment of the invention comprises the following components:
the task editing device is used for defining a service scene, participating users, service events and setting tasks in the process of carrying out simulation deduction according to actual services, forming setting simulation objects according to the definition, establishing membership relations among the simulation objects, and forming inherent behavior logic of the simulation objects;
the script management device is used for forming sequential logic nodes and branch logic nodes according to deduction logic of the set task, carrying out parameter configuration of simulation objects according to the logic node types, and forming an execution script of the set task according to the sequential logic nodes and the branch logic nodes;
the deduction engine device is used for carrying out simulation deduction resource scheduling according to a simulation deduction resource application of the execution script forming business event and adjusting a simulation deduction process through the execution script;
the scene management device is used for carrying out simulation deduction according to a simulation deduction scene of the service event formed by the simulation deduction resource scheduling and forming simulation deduction feedback data according to the simulation deduction progress;
and the analysis display device is used for analyzing and displaying key indexes of the feedback data.
The electronic equipment of the embodiment of the invention comprises:
a processor, a memory, an interface in communication with the gateway;
the memory is used for storing programs and data, and the processor calls the programs stored in the memory to execute the method.
The computer readable storage medium of an embodiment of the present invention includes a program for executing the above-described method when executed by a processor.
According to the simulation deduction method, the system, the electronic equipment and the medium based on the network target range, provided by the embodiment of the invention, through simulation objectification and script of the simulation deduction process of the service scene, the virtual service scene construction of the service event is realized by directly utilizing the virtualization technology of the network target range, and the actual service scene can be mapped directly to carry out deduction and verification of the complex service event. And meanwhile, the rollback analysis and snapshot multiplexing of the simulation deduction are realized by fully utilizing the data management capability and the scene management capability of the network target range, and a large quantity of virtualization is formed by matching with the business scene and script control to realize the parallel verification of different deduction branches. And carrying out more deep business development and deduction verification by using the formed deduction feedback data and deduction scene.
Drawings
Fig. 1 is a flow chart of a simulation deduction method based on a network target range according to an embodiment of the invention.
Fig. 2 is a schematic diagram of a practical application flow of a simulation deduction method based on a network target range according to an embodiment of the invention.
Fig. 3 is a schematic diagram of an architecture of a simulation deduction system based on a network target range according to an embodiment of the invention.
Fig. 4 is a schematic structural diagram of an electronic device according to an embodiment of the invention.
Detailed Description
The present invention will be further described with reference to the drawings and the detailed description below, in order to make the objects, technical solutions and advantages of the present invention more apparent. It will be apparent that the described embodiments are only some, but not all, embodiments of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
An embodiment of a simulation deduction method based on a network target range is shown in fig. 1. In fig. 1, the present embodiment includes:
step 100: and defining a service scene, participating users, service events and setting tasks in the simulation deduction process according to the actual service, forming setting simulation objects according to the definition, establishing membership relations among the simulation objects, and forming inherent behavior logic of the simulation objects.
Those skilled in the art will appreciate that parallel simulation techniques may form a business scenario in a network target range to develop a simulation of an actual business process. The deduction process of the business event in the business simulation process can abstract and define the business system state, the type of the participating user, the business event behavior, the quoted resource and other business specific contents in the business scene. By defining simulation objects of different layers and types in the process of forming simulation deduction, deduction behaviors and deduction states when service events are triggered are quantified by defining membership and interaction logic of the simulation objects. The tasks are composed of business events requiring simulation deduction, and the set tasks comprise the expected purpose, the expected process and the expected target setting of the simulation deduction.
Step 200: and forming sequential logic nodes and branch logic nodes according to the deduction logic of the set task, configuring parameters of the simulation object according to the logic node type, and forming an execution script of the set task according to the sequential logic nodes and the branch logic nodes.
Setting a task to have an intended process and an intended target can abstract execution logic of the task process. By forming sequential logical nodes of the deduction main process and branch logical nodes of the deduction branch process, a logical description of the set task simulation deduction process can be formed. The parameter configuration of the simulation object according to the logic node type can adjust the parameters and states of the simulation object in the logic segment of the setting task so as to adapt to the logic divergence and the event expansion of the simulation deduction process. And forming a description script for main process deduction and extension branch process deduction of the simulation deduction process according to the logic nodes, and quantifying a task expected target in the description script as a task staged measurement parameter.
Step 300: and forming a simulation deduction resource application of the business event according to the execution script, carrying out simulation deduction resource scheduling, and adjusting the simulation deduction process through the execution script.
The setup tasks may include ordered simulation deductions of several business events. The requirements of the simulation deduction resources of different business events are different, one part needs to form a new virtual scene to match with scene resources to complete the simulation deduction process, and the other part can utilize intermediate data and result data of the same formed simulation deduction process. And scheduling available existing simulation deduction resources and newly formed simulation deduction resources through simulation deduction resource scheduling so as to meet the overall requirements of the set task. Meanwhile, the overall simulation deduction process of the set task is controlled in time sequence and on branches according to the adjustment of the description script, and the process adjustment is performed according to the contents of participators, business events, feedback requirements and the like, but the process adjustment is not limited to the process adjustment.
Step 400: and performing simulation deduction according to a simulation deduction scene of the service event formed by the simulation deduction resource scheduling, and forming simulation deduction feedback data according to the simulation deduction progress.
The scene requirements for new simulation deductions are obtained by applying for virtual resource platforms of the network target range. In the process of carrying out simulation deduction through the simulation deduction scene, the management function of the virtual resource platform is utilized to construct the data management function of the simulation deduction process, including but not limited to scene management, event management, mirror image snapshot and rollback of the simulation scene and the like.
Step 500: and carrying out key index analysis and display on the feedback data.
According to the expected target of the task, forming a task execution key index, and carrying out quantitative analysis of a simulation deduction process on the feedback data. The quantitatively analyzed content includes, but is not limited to, playback based on business events, statistics and presentation based on time dimensions, and the like.
According to the simulation deduction method based on the network target range, through simulation objectification and simulation deduction process scripting of the service scene, virtual service scene construction of the service event is achieved directly through the virtualization technology of the network target range, and the actual service scene can be mapped directly to conduct deduction and verification of the complex service event. And meanwhile, the rollback analysis and snapshot multiplexing of the simulation deduction are realized by fully utilizing the data management capability and the scene management capability of the network target range, and a large quantity of virtualization is formed by matching with the business scene and script control to realize the parallel verification of different deduction branches. And carrying out more deep business development and deduction verification by using the formed deduction feedback data and deduction scene.
In one embodiment of the present invention, as shown in fig. 1, step 100 includes:
step 110: a service scenario definition corresponding to the actual service is formed.
Resource references necessary in actual business are quantified by business scenario definition, including but not limited to system resource references, third party resource medical and human resource references. The traffic scenario definition forms an overall quantification of the actual traffic.
Step 120: and forming definitions of scene resources, user types and business events in the business scene.
Hierarchical quantization of actual service concrete execution entities is formed through definition of scene resources, user types and service events.
Step 130: defining scene resources, user types and membership of business events and internal behavior logic.
And forming the association quantification of the business object through the membership, and forming the attribution of the internal logic of the business object through the internal behavior logic.
The simulation deduction method based on the network target range provides an effective means for objectifying the actual business scene. The simulation scene content and the deduction process formed by using the network target range resource can be quantized, and the object scene content has a multiplexing basis.
In one embodiment of the present invention, as shown in FIG. 1, step 200 comprises:
step 210: and splitting the set task to form an independent business event, and forming a sequential logic node and a branch logic node according to the execution logic of the independent business event.
The setting task is a service logic mapping of the actual service process, and the splitting into logic nodes is beneficial to the logic division of the service process.
Step 220: processing logic data, resource reference data and service continuation data of the user participation service in the sequential logic node are formed.
The processing logic data describes the service fragment, the resource reference data defines the resource requirement of the service fragment, and the service continuation data describes the association with other logic nodes.
Step 230: and forming branch logic data, judgment logic data and business state feedback data of the business in the branch logic node.
The branch logic data describes service branch fragments, the logic data is judged to limit service branch forming conditions, and the business logic continuation after service expansion is formed by the service branches is described by the business feedback data.
Step 240: and forming a main process execution script through the sequential logic nodes, setting a task expected target in a main process deduction script, and forming an extension process execution script through the branch logic nodes.
The task expectation objective quantifies the service execution results for the metric marking service termination. Contemplated task goals include, but are not limited to, achieving complete processing of business events within a specified benefit range under a specific personnel specific resource. Each script cooperates to form the logic adaptation of the constituent events of the task, so that the complete processing of the business event is satisfied.
The simulation deduction method based on the network shooting range forms good logic adaptation of a true business process by executing a script. Meanwhile, the scheduling flexibility of the business simulation deduction process is formed by utilizing business logic scripting, and flexible scheduling of business logic and flexible configuration of simulation virtual scene resources are met.
In one embodiment of the present invention, as shown in FIG. 1, step 300 comprises:
step 310: and carrying out simulation deduction scene recognition and simulation deduction event recognition on the execution script for carrying out the simulation deduction resource application, and matching with the simulation history accumulated resources.
The setting tasks defined in the execution script comprise simulation scenes and simulation events in the simulation scenes. Mature simulation scenes and simulation events in the simulation scenes exist in the historically formed simulation tasks. The repeated consumption of the simulation deduction resources can be effectively reduced by matching in the simulation history accumulation resources, and the repeated consumption and time cost consumption of personnel configuration and virtual scene construction resources are avoided. The simulation history accumulated resources include, but are not limited to, personnel, events, interaction data of scenes under specific application scenes, and corresponding virtual scene snapshots.
Step 320: and when the matched resources exist, acquiring simulation deduction data corresponding to event deduction feedback in the virtual scene in the history accumulated resources.
And (3) matching the judging basis of the resources, checking whether the scenes are the same, checking whether the security events are the same, and if the scenes are the same, judging the security events to be the existing historical simulation events, and performing deployment and simulation deduction verification confirmation of the virtual simulation environment again is not needed, namely, new user resources are not needed to be allocated for corresponding execution scripts, and feedback simulation data are not needed to be formed again by the virtual resources. The interaction data of personnel interaction behaviors, events and scenes in the historical simulation events can be directly referred to by deduction without reconstruction and verification.
Step 330: and when the matching resources do not exist, issuing an execution script to the network target field to request the simulation deduction resources, and receiving simulation deduction data fed back by the network target field.
Issuing a simulation deduction resource request of an execution script, wherein the simulation deduction resource request comprises but is not limited to virtual machine resources of a network target range, attack/malicious software constructed by a service (security) event and available network resources/access paths; access for users and administration of passwords. And feeding back deduction intermediate data and result data according to the simulation deduction process of the service virtual scene and carrying out data display.
Step 340: and controlling the issuing time sequence of the execution script to control the simulation deduction progress, and adjusting the simulation deduction process according to the scheduling data of the execution script.
The simulation deduction progress control comprises time sequence and progress control, so that macroscopic setting in a setting task and real virtual simulation platform control are achieved, meanwhile, simulation scene data acquisition is achieved, and overall task promotion is achieved. Scheduling data includes, but is not limited to, adjusting personnel (dimensions relating to personnel's level of operability, security awareness, etc.), security events (dimensions of event type, event difficulty, complexity of treatment, etc.), outcome requirements (dimensions defining time, defining treatment methods, etc.); the adjustment behavior is taken as a branch of the overall deduction scheme, and can be quickly constructed by copying the original virtual scene or constructed by utilizing the forms of snapshot and the like of the virtual scene.
And forming a control channel for seamless connection between the simulation logic of the execution script and the virtualized simulation resource of the network target range. The method has the advantages that flexible scheduling of the simulation deduction process is formed, meanwhile, the utilization rate of the network target range simulation deduction resources is effectively improved, and the utilization rate of the existing simulation deduction results in the simulation task is effectively improved.
In one embodiment of the present invention, as shown in FIG. 1, step 400 comprises:
step 410: and performing simulation deduction scene management through the network target range.
And managing the resource allocation of the virtual scene by utilizing the resource management function of the network target range.
Step 420: and performing simulation deduction data monitoring through the network target range.
And carrying out data management such as snapshot, rollback, display, playback, storage and the like on the deduction process of the virtual task or event in deduction by utilizing the data monitoring function of the network target range.
Step 430: and obtaining feedback data of simulation deduction through the network target range.
And feeding back deduction process data taking the set expected target as a trigger condition by utilizing a data monitoring function of the network target range.
The simulation deduction method based on the network target range, provided by the embodiment of the invention, utilizes the virtual resource configuration function, the virtual scene management function and the scene data monitoring function of the network target range to form parallel processing on the simulation deduction process, thereby being beneficial to realizing batch processing, rapid branching, expansion and iteration of large-scale complex setting tasks. The efficiency and complexity of the real business simulation are improved well.
In one embodiment of the present invention, as shown in FIG. 1, step 500 comprises:
step 510: and (3) carrying out time sequence correlation and storage on the feedback data and the scenes and the events to form simulation history accumulated resource update.
Step 520: and comparing with the task setting target, and forming data display.
The task setting targets comprise comparison factors such as completion time, personnel capability requirements, task completion degree, human resource input condition and the like. According to the simulation deduction method based on the network shooting range, provided by the embodiment of the invention, an updating mechanism of the simulation history accumulated resources is established while the simulation deduction result is obtained. So that the simulation deduction result can be effectively reused.
The practical application of the simulation deduction method based on the network target range according to the embodiment of the invention is shown in fig. 2. In fig. 2, the definition of the set task is formed by the definition of the scenario, the user and the business practice. The definition of the scenario, user and business practices form an instantiating simulation object. And forming verification data and comparison indexes of simulation deduction by setting target requirements of tasks. And constructing a simulation process deduction script with a main simulation process and a branch expansion process according to the business logic of the set task. In the process of forming a simulation deduction scene through a deduction script, historical simulation data are obtained through comparison of historical simulation resources, and simulation efficiency is improved. Forming a targeted simulation deduction scene by utilizing virtual scene resources governed by the network target places, and controlling a simulation process and simulation logic by utilizing the deduction script. In the simulation deduction process, the process of monitoring and the storage of deduction result data are formed through the management resources and the storage resources of the network target range. And further, analysis of the data of the delay result is formed, and measurement and display of key indexes are formed.
An embodiment of the invention is a simulation deduction system based on a network target range as shown in fig. 3. In fig. 3, the present embodiment includes:
the task editing device 10 is used for defining a service scene, a participating user, a service event and a setting task in the process of carrying out simulation deduction according to an actual service, forming a setting simulation object according to the definition, establishing a membership relationship between the simulation objects, and forming an inherent behavior logic of the simulation object;
the script management device 20 is configured to form sequential logic nodes and branch logic nodes according to deduction logic of the set task, perform parameter configuration of the simulation object according to the logic node type, and form an execution script of the set task according to the sequential logic nodes and the branch logic nodes;
the deduction engine device 30 is used for carrying out the scheduling of the simulation deduction resources according to the application of the simulation deduction resources for forming the business event by executing the script, and adjusting the simulation deduction process by executing the script;
the scene management device 40 is configured to perform simulation deduction according to a simulation deduction scene of the service event formed by scheduling the simulation deduction resource, and form simulation deduction feedback data according to a simulation deduction progress;
the analysis and display device 50 is used for analyzing and displaying key indexes of the feedback data.
As shown in fig. 3, in an embodiment of the present invention, the task editing device 10 includes:
a scene definition module 11, configured to form a service scene definition corresponding to an actual service;
an object definition module 12, configured to form definitions of scene resources, user types and service events in the service scene;
the attribute definition module 13 is configured to define membership and internal behavior logic of scene resources, user types, and service events.
As shown in fig. 3, in an embodiment of the present invention, the script management device 20 includes:
the event splitting module 21 is configured to split the set task into events to form an independent service event, and form a sequential logic node and a branch logic node according to execution logic of the independent service event;
a first configuration module 22, configured to form processing logic data, resource reference data and service continuation data of a user participating in a service in the sequential logic node;
the second configuration module 23 is configured to form branch logic data, judgment logic data and business state feedback data of the business in the branch logic node;
the script generating module 24 is configured to form a main process execution script through sequential logic nodes, set a task expected target in a main process deduction script, and form an extension process execution script through branch logic nodes.
As shown in fig. 3, in an embodiment of the present invention, the deduction engine device 30 includes:
the resource discriminating module 31 is configured to perform simulation deduction scene recognition and simulation deduction event recognition on an execution script that performs a simulation deduction resource application, and match with a simulation history accumulated resource;
the resource matching module 32 is configured to obtain simulation deduction data corresponding to event deduction feedback in the virtual scene in the history accumulated resource when a matching resource exists;
the resource allocation module 33 is configured to issue an execution script to the network target site to request a simulation deduction resource and receive simulation deduction data fed back by the network target site when no matching resource exists;
the deduction control module 34 is used for controlling the issuing time sequence of the execution script to control the deduction progress of the simulation, and adjusting the deduction process of the simulation according to the scheduling data of the execution script.
As shown in fig. 3, in an embodiment of the present invention, the scene management device 40 includes:
the resource management module 41 is used for performing simulation deduction scene management through a network target range;
the data monitoring module 42 is used for performing simulation deduction data monitoring through the network target range;
the data acquisition module 43 is configured to acquire feedback data of the simulation deduction through the network target range.
As shown in fig. 3, in an embodiment of the present invention, the simulation analysis apparatus 50 includes:
the resource updating module 51 is configured to time-sequentially correlate and store the feedback data with the scene and the event, so as to form a simulation history accumulated resource update;
the analysis display module 52 is configured to compare with the task setting target and form a data display.
The embodiment of the present application further provides a specific implementation manner of an electronic device capable of implementing all the steps in the method in the foregoing embodiment, and referring to fig. 4, the electronic device 600 specifically includes the following:
processor 610, memory 620, communication unit 630, and bus 640;
wherein processor 610, memory 620, and communication unit 630 communicate with each other via bus 640; the communication unit 630 is configured to implement information transmission between the server-side device and the terminal device.
The processor 610 is configured to invoke a computer program in the memory 620, and when the processor executes the computer program, the processor implements all the steps in the network-based simulation deduction method in the above embodiment.
Those of ordinary skill in the art will appreciate that: the Memory may be, but is not limited to, random access Memory (Random Access Memory; RAM; ROM; programmable Read-Only Memory; PROM; erasable ROM; erasable Programmable Read-Only Memory; EPROM; electrically erasable ROM; electric Erasable Programmable Read-Only Memory; EEPROM; etc.). The memory is used for storing a program, and the processor executes the program after receiving the execution instruction. Further, the software programs and modules within the memory may also include an operating system, which may include various software components and/or drivers for managing system tasks (e.g., memory management, storage device control, power management, etc.), and may communicate with various hardware or software components to provide an operating environment for other software components.
The processor may be an integrated circuit chip with signal processing capabilities. The processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, abbreviated as CPU), a Network Processor (NP), and the like. The disclosed methods, steps, and logic blocks in the embodiments of the present application may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The present application also provides a computer readable storage medium comprising a program which, when executed by a processor, is adapted to carry out the network-based simulation deduction method provided by any of the method embodiments described above.
Those of ordinary skill in the art will appreciate that: all or part of the steps for implementing the method embodiments described above may be performed by hardware associated with program instructions. The foregoing program may be stored in a computer readable storage medium. The program, when executed, performs steps including the method embodiments described above; and the aforementioned storage medium includes: various media may store program code, such as ROM, RAM, magnetic or optical disks, and the specific type of media is not limiting in this application.
The present invention is not limited to the above-mentioned embodiments, and any changes or substitutions that can be easily understood by those skilled in the art within the technical scope of the present invention are intended to be included in the scope of the present invention. Therefore, the protection scope of the present invention should be subject to the protection scope of the claims.
Claims (9)
1. The simulation deduction method based on the network target range is characterized by comprising the following steps of:
defining a service scene, participating users, service events and setting tasks in the simulation deduction process according to the actual service, forming setting simulation objects according to the definition, establishing membership relations among the simulation objects, and forming inherent behavior logic of the simulation objects;
forming sequential logic nodes and branch logic nodes according to deduction logic of the set tasks, configuring parameters of simulation objects according to logic node types, and forming execution scripts of the set tasks according to the sequential logic nodes and the branch logic nodes;
according to the application of the simulation deduction resources for forming the business event by the execution script, performing simulation deduction resource scheduling, and adjusting the simulation deduction process by the execution script;
performing simulation deduction according to a simulation deduction scene of a service event formed by scheduling the simulation deduction resources, and forming simulation deduction feedback data according to a simulation deduction progress;
and carrying out key index analysis and display on the feedback data.
2. The simulation deduction method based on the network target range according to claim 1, wherein the defining of the service scene, the participating user, the service event and the setting task in the simulation deduction process according to the actual service forms the setting simulation object according to the definition, establishes the membership between the simulation objects, and forms the internal behavior logic of the simulation object comprises:
forming a service scene definition corresponding to the actual service;
forming definitions of scene resources, user types and business events in the business scene;
defining scene resources, user types and membership of business events and internal behavior logic.
3. The simulation deduction method based on the network targeting as set forth in claim 1, wherein the forming the sequential logic node and the branch logic node according to the deduction logic of the set task, the configuring the parameters of the simulation object according to the logic node type, and the forming the execution script of the set task according to the sequential logic node and the branch logic node, includes:
carrying out event splitting on the set task to form an independent service event, and forming a sequential logic node and a branch logic node according to the execution logic of the independent service event;
forming processing logic data, resource reference data and service continuation data of the user participation service in the sequential logic node;
forming branch logic data, judgment logic data and business state feedback data of the business in the branch logic node;
and forming a main process execution script through the sequential logic nodes, setting a task expected target in a main process deduction script, and forming an extension process execution script through the branch logic nodes.
4. The simulation deduction method based on the network target range according to claim 1, wherein the forming the simulation deduction resource application of the business event according to the execution script to perform the simulation deduction resource scheduling, and the adjusting the simulation deduction process through the execution script comprises:
performing simulation deduction scene recognition and simulation deduction event recognition on an execution script for performing simulation deduction resource application, and matching with a simulation history accumulated resource;
when the matching resources exist, acquiring simulation deduction data of event deduction feedback in a corresponding virtual scene in the history accumulated resources;
when the matching resources do not exist, issuing an execution script to the network target field to request simulation deduction resources, and receiving simulation deduction data fed back by the network target field;
and controlling the issuing time sequence of the execution script to control the simulation deduction progress, and adjusting the simulation deduction process according to the scheduling data of the execution script.
5. The simulation deduction method based on the network shooting range of claim 1, wherein the forming the simulation deduction feedback data according to the simulation deduction progress by performing the simulation deduction according to the simulation deduction scene of the business event formed by the simulation deduction resource schedule comprises:
performing simulation deduction scene management through a network target range;
simulation deduction data monitoring is carried out through a network target range;
and obtaining feedback data of simulation deduction through the network target range.
6. The method for simulating deduction based on a network range as claimed in claim 1, wherein the analyzing and displaying key indexes of the feedback data includes:
the feedback data is associated with the scene and the event in a time sequence manner and stored to form simulation history accumulated resource update;
and comparing with the task setting target, and forming data display.
7. A simulation deduction system based on a network target range, comprising:
the task editing device is used for defining a service scene, participating users, service events and setting tasks in the process of carrying out simulation deduction according to actual services, forming setting simulation objects according to the definition, establishing membership relations among the simulation objects, and forming inherent behavior logic of the simulation objects;
the script management device is used for forming sequential logic nodes and branch logic nodes according to deduction logic of the set task, carrying out parameter configuration of simulation objects according to the logic node types, and forming an execution script of the set task according to the sequential logic nodes and the branch logic nodes;
the deduction engine device is used for carrying out simulation deduction resource scheduling according to a simulation deduction resource application of the execution script forming business event and adjusting a simulation deduction process through the execution script;
the scene management device is used for carrying out simulation deduction according to a simulation deduction scene of the service event formed by the simulation deduction resource scheduling and forming simulation deduction feedback data according to the simulation deduction progress;
and the analysis display device is used for analyzing and displaying key indexes of the feedback data.
8. An electronic device, comprising:
a processor, a memory, an interface in communication with the gateway;
the memory is used for storing programs and data, and the processor calls the programs stored in the memory to execute the method according to any one of claims 1 to 6.
9. A computer readable storage medium, characterized in that the computer readable storage medium comprises a program for performing the method of any of claims 1 to 6 when being executed by a processor.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311620231.8A CN117709077A (en) | 2023-11-30 | 2023-11-30 | Simulation deduction method and system based on network target range, electronic equipment and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311620231.8A CN117709077A (en) | 2023-11-30 | 2023-11-30 | Simulation deduction method and system based on network target range, electronic equipment and medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN117709077A true CN117709077A (en) | 2024-03-15 |
Family
ID=90157995
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202311620231.8A Pending CN117709077A (en) | 2023-11-30 | 2023-11-30 | Simulation deduction method and system based on network target range, electronic equipment and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117709077A (en) |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106506218A (en) * | 2016-11-15 | 2017-03-15 | 中国电子科技集团公司第二十八研究所 | A kind of emulation mode of Dynamic injection formula Botnet dissemination |
| CN108664121A (en) * | 2018-03-31 | 2018-10-16 | 中国人民解放军海军航空大学 | A kind of emulation combat system-of-systems drilling system |
| CN112118272A (en) * | 2020-11-18 | 2020-12-22 | 中国人民解放军国防科技大学 | Network attack and defense deduction platform based on simulation experiment design |
| CN115297010A (en) * | 2022-07-22 | 2022-11-04 | 南京萌草信息技术有限公司 | Permission acquisition target design method for network access equipment |
| CN115408697A (en) * | 2021-05-27 | 2022-11-29 | 中国移动通信集团有限公司 | Method, device, equipment and product for evaluating ability of defensive personnel in network shooting range |
| CN115841310A (en) * | 2022-12-29 | 2023-03-24 | 奇安信网神信息技术(北京)股份有限公司 | Construction method of plan flow model, event processing method and device |
| WO2023072272A1 (en) * | 2021-10-30 | 2023-05-04 | 华为技术有限公司 | Communication method and apparatus |
| CN116366324A (en) * | 2023-03-24 | 2023-06-30 | 武汉大学 | Analysis method and device for behaviors of drilling personnel in network target range |
| KR102578421B1 (en) * | 2022-12-21 | 2023-09-18 | 주식회사 알파인랩 | Method And System for managing of attack equipment of Cyber Attack Simulation Platform |
-
2023
- 2023-11-30 CN CN202311620231.8A patent/CN117709077A/en active Pending
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106506218A (en) * | 2016-11-15 | 2017-03-15 | 中国电子科技集团公司第二十八研究所 | A kind of emulation mode of Dynamic injection formula Botnet dissemination |
| CN108664121A (en) * | 2018-03-31 | 2018-10-16 | 中国人民解放军海军航空大学 | A kind of emulation combat system-of-systems drilling system |
| CN112118272A (en) * | 2020-11-18 | 2020-12-22 | 中国人民解放军国防科技大学 | Network attack and defense deduction platform based on simulation experiment design |
| CN115408697A (en) * | 2021-05-27 | 2022-11-29 | 中国移动通信集团有限公司 | Method, device, equipment and product for evaluating ability of defensive personnel in network shooting range |
| WO2023072272A1 (en) * | 2021-10-30 | 2023-05-04 | 华为技术有限公司 | Communication method and apparatus |
| CN115297010A (en) * | 2022-07-22 | 2022-11-04 | 南京萌草信息技术有限公司 | Permission acquisition target design method for network access equipment |
| KR102578421B1 (en) * | 2022-12-21 | 2023-09-18 | 주식회사 알파인랩 | Method And System for managing of attack equipment of Cyber Attack Simulation Platform |
| CN115841310A (en) * | 2022-12-29 | 2023-03-24 | 奇安信网神信息技术(北京)股份有限公司 | Construction method of plan flow model, event processing method and device |
| CN116366324A (en) * | 2023-03-24 | 2023-06-30 | 武汉大学 | Analysis method and device for behaviors of drilling personnel in network target range |
Non-Patent Citations (1)
| Title |
|---|
| 黄震;朱俊虎;邱菡;周天阳;: "VNTGM:面向大规模网络安全实验的虚拟网络拓扑生成方法", 《信息工程大学学报》, 15 April 2019 (2019-04-15) * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111768008A (en) | Federal learning method, device, equipment and storage medium | |
| CN110780847B (en) | Random number generation method, random number generation device and electronic equipment | |
| CN110830234B (en) | User traffic distribution method and device | |
| CN108492005B (en) | Project data processing method and device, computer equipment and storage medium | |
| CN112631605A (en) | Code compiling method, device, equipment and storage medium of federal learning model | |
| CN112465448B (en) | Cross-organization workflow operation method and system based on blockchain | |
| WO2007126548A2 (en) | Adaptive mission profiling | |
| CN112738137A (en) | Data acquisition and link processing method and device, computer equipment and storage medium | |
| CN112017007A (en) | User behavior data processing method and device, computer equipment and storage medium | |
| KR101080974B1 (en) | Emulation System and Method for Computational Simulation based on Computing Resources | |
| CN107220169B (en) | Method and equipment for simulating server to return customized data | |
| CN114328217A (en) | Application testing method, device, equipment, medium and computer program product | |
| CN112199273A (en) | Virtual machine pressure/performance testing method and system | |
| CN112632527A (en) | API (application programming interface) testing method and system for service open platform | |
| Jamil et al. | Towards automated threat modeling of cyber-physical systems | |
| CN112256760B (en) | Data prediction method and device, computer equipment and storage medium | |
| CN117709077A (en) | Simulation deduction method and system based on network target range, electronic equipment and medium | |
| CN116661739A (en) | Processing method, device, equipment and storage medium of business rule | |
| CN110928526A (en) | Processing device for Internet of things | |
| CN113449444A (en) | Simulation method, computer device and storage medium for domain engineering | |
| CN106372859A (en) | Timing task control analysis method and system, and master control server | |
| CN111737319A (en) | User cluster prediction method and device, computer equipment and storage medium | |
| CN111813145A (en) | Control method for unmanned aerial vehicle cruising and related system | |
| Boguhn | Benchmarking the scalability of distributed stream processing engines in case of load peaks | |
| CN112231367B (en) | Business processing method and device based on artificial intelligence and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |