Network service simulation method and device

Abstract

The embodiment of the invention provides a network service simulation method and device, and the method comprises the steps: obtaining a website of a network simulation server carried in a request when detecting that a client initiates the request for establishing a network connection with the network simulation server; generating a server certificate corresponding to the network simulation serverby utilizing a pre-installed root certificate according to the website of the network simulation server; and establishing a network connection between the client and the network simulation server according to the certificate of the server. According to the network service simulation method and device, due to the fact that the server side certificate corresponding to the network simulation serveris generated through the pre-installed root certificate, the network connection between the client side and the network simulation server can be established according to the server side certificate, and then data safety analysis between the client side and the network simulation server is achieved.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a network service simulation method and device. Background technique [0002] Malicious network behavior refers to the behavior that the hardware, software and data in the network system are damaged, changed, or leaked by malicious code attacks, resulting in the failure of continuous, reliable and normal operation of the system and interruption of network services. With the popularization of informatization and the emergence of a large number of new network applications, the behaviors displayed by network malicious codes are also emerging one after another. Resolution Protocol (Address Resolution Protocol) spoofing, IP (Internet Protocol, Internet Protocol) hijacking, DDOS (Distributed Denial of Service, distributed denial of service) attack, overflow attack, Trojan horse attack, etc. [0003] Among the existing network malicious behavior analysis methods, the sandbox analysis...

AI Technical Summary

Problems solved by technology

[0004] In the prior art, it is possible to simulate a network server in a sandbox, so as to monitor the access process of a network server by malicious behavior on the network. Secure Socket Layer, Hypertext Transfer Security Protocol), SSH (Secure Shell, Secure Shell Protocol) and other network servers using encrypted communication protocols, because they cannot provide legal certificates corresponding to the simulated URLs, resulting in a gap between the client and the simulated server The communication between them cannot be established, so the data security problem between the client and the simulated server cannot be analyzed

Images