Competition platform dynamic Flag injection method and system based on file system

Abstract

The invention discloses a competition platform dynamic Flag injection method and system based on a file system. According to the method, a virtual machine file system mounting scheme is adopted, a binding relation is recorded when a player starts a game question environment, Flag information is generated, and a related request is sent to a proxy service on a computing node; and the proxy service creates a directory to be mounted and writes Flag information, a directory mounting command is written by modifying a startup script of a virtual machine mirror image, a startup command is generated according to the mounting information, the game environment virtual machine is started, a corresponding directory on a computing node can be automatically mounted after the game environment virtual machine is started, and Flag injection is achieved. When the player reconstructs the game environment, the Flag does not need to be injected again for the environment in which the Flag is successfully injected. Network communication between the competition platform and the competition question environment virtual machine is not needed, Flag injection of an independent network competition question environment is supported, and the safety, the injection efficiency and the success rate are improved.

Description

technical field [0001] The invention relates to a dynamic Flag injection method and system for a competition platform based on a file system, and belongs to the fields of network security and computer software. Background technique [0002] CTF (Capture The Flag) is a form of technical competition among network security technicians. Participating teams take the lead in obtaining a string of strings or other content with a certain format from the competition environment through offensive and defensive confrontation, program analysis, etc., and submit it to the organizer to win points. Call it Flag. In order to prevent participating teams or players from cheating, a dynamic Flag scheme is usually adopted. At present, the competition platform injects dynamic Flags into the competition environment, which usually depends on the network between the competition platform and the virtual machine of the competition environment, for example figure 1 A flag injection scheme based on ...

AI Technical Summary

Problems solved by technology

[0003] The existing Flag injection scheme has the following problems: 1. The virtual machine must have network services, obtain the correct IP address and enable the SSH service to inject the Flag; 2. Injecting the Flag through SSH needs to ensure that the competition platform and the competition environment The network between machines can be connected, and flags cannot be injected into the competition in an independent network environment; 3. After starting the virtual machine of the competition environment, it is necessary to regularly check whether the Flag port of the virtual machine of the competition environment is connected, and a large number of users start the competition concurrently. In the test environment, a process will be allocated for the connectivity detection of each test environment, which will take up a lot of server resources; 4. Every time the user restores the virtual machine of the test environment, the Flag needs to be re-injected

Images