Attack detection recall rate automatic test method, device and storage medium
An attack detection and automatic testing technology, applied in digital transmission systems, data exchange networks, electrical components, etc., can solve problems such as inaccurate attack detection recall rate and high labor costs
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
no. 1 example
[0046] refer to figure 2 , figure 2 The first embodiment of the method for automatically testing the recall rate of the network simulation platform attack detection method of the present invention comprises the following steps:
[0047] Step S110, the console obtains the target project to be attacked and attack parameters set in the network simulation platform, and launches an attack on the target project to be attacked.
[0048] In this embodiment, the network simulation platform is an important infrastructure for network attack and defense drills, personnel training, network security technology and network new technology testing. An important quantitative indicator of detection technology, we use it to evaluate the underreporting of attack events on the network simulation platform, and its calculation formula is as follows:
[0049] Recall rate = detected correct attack events / actually launched attack events
[0050] Attack detection is intrusion detection, intrusion de...
no. 2 example
[0060] refer to image 3 , image 3 For the second embodiment of the method for automatically testing the recall rate of the network simulation platform attack detection recall of the present invention, comprising:
[0061] Compared with the first embodiment, the second embodiment includes step S210 and step S220, and other steps are the same as the first embodiment, and will not be repeated here.
[0062] In step S210, the project ID for the attack test, the attack event type and the corresponding attack times are set in advance in the network simulation platform.
[0063] In this embodiment, the tester deploys the test environment on the attack machine, and the tester can pre-set the project ID, attack event type, and corresponding attack times on the console in the network simulation platform, such as setting the attack test The project ID of is preferably 1, 2, 3; attack event types include but not limited to denial of service attack, botnet and fuzzy attack; their corre...
no. 3 example
[0070] refer to Figure 4 , Figure 4 The third embodiment of the method for automatically testing the recall rate of the network simulation platform attack detection recall of the present invention includes:
[0071] In step S310, the project ID for the attack test, the attack event type and the corresponding attack times are set in advance in the network simulation platform.
[0072] Step S320, acquiring the target project to be attacked according to the project ID.
[0073] Step S330, the console obtains the target project to be attacked and the attack parameters set in the network simulation platform, and launches an attack on the target project to be attacked.
[0074] Step S340, the network simulation platform detects the attack event and generates a security log.
[0075]Compared with the second embodiment, the third embodiment includes step S350, and other steps are the same as the second embodiment, and will not be repeated here.
[0076] Step S350, collecting and...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 


