Method, system and server for automatically splitting IPS event

An event and automatic technology, applied in the field of automatic splitting of IPS events, can solve the problems of manpower and time consumption, low efficiency of splitting IPS events, etc.

Active Publication Date: 2022-04-12
BEIJING ANBOTONG TECH CO LTD
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

To solve the existing method of manually splitting IPS events, it will consume a lot of manpower and time, resulting in the problem of low efficiency of IPS event splitting

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method, system and server for automatically splitting IPS event
  • Method, system and server for automatically splitting IPS event
  • Method, system and server for automatically splitting IPS event

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0053] The embodiments will be described in detail hereinafter, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following examples do not represent all implementations consistent with this application. These are merely examples of systems and methods consistent with aspects of the present application as recited in the claims.

[0054] When performing a performance test on the application software, the tester can obtain the test message file through the test device, and perform performance analysis and verification according to the test message file. For example, when testing the security performance of application software, the obtained test message files include multiple intrusion prevention system (Intrusion Prevention System, IPS) events, and the tes...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a method and system for automatically splitting an IPS event and a server. The method comprises the following steps: acquiring a csv file and a pcap file; extracting first session information, wherein the first session information is session information in a csv file; creating a session information dictionary and an IPS event split file according to the first session information; extracting second session information and a corresponding event data packet, wherein the second session information is session information in a pcap file; judging whether the second session information is in a session information dictionary or not; and if the second session information is in the session information dictionary, adding an event data packet corresponding to the second session information to a target IPS event split file, the target IPS event split file being an IPS event split file corresponding to the second session information. According to the method provided by the invention, automatic splitting of the IPS event can be realized according to the session information, manual selection operation is not needed, and the splitting efficiency of the IPS event is improved.

Description

technical field [0001] The present application relates to the technical field of equipment performance testing, in particular to a method, system and server for automatically splitting IPS events. Background technique [0002] When performing a performance test on the application software, the tester can obtain the test message file through the test device, and perform performance analysis and verification according to the test message file. For example, when testing the security performance of application software, the obtained test message files include multiple intrusion prevention system (Intrusion Prevention System, IPS) events, and the testers need to analyze the multiple IPS events in the test message files according to requirements. Split and select specified IPS events for analysis. [0003] Currently, IPS events are usually split in a manner manually selected by testers based on session information. However, if the obtained test packet file is large, manually spl...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/36
Inventor 尹志勇
Owner BEIJING ANBOTONG TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products