Method and device for determining checking result of target equipment and electronic equipment

Abstract

The invention discloses a method and a device for determining a checking result of target equipment and electronic equipment. The method comprises the steps that a checking instruction sent by a target object is received, and the checking instruction carries a target device identifier; in response to the verification instruction, establishing a remote connection with the target device according to the target device identifier; determining a target checking list according to the equipment parameters of the target equipment and the to-be-executed task; and controlling the target equipment to check according to the target check list to obtain a check result. According to the method and the device, the problems that a conventional checking means is adopted for detection when checking is carried out on the target equipment before the to-be-executed task is executed, pertinence is not achieved, and the technical problem that accurate and timely checking is difficult due to the fact that timely updating is difficult to carry out after the equipment is updated in the prior art are solved.

Description

Technical Field

[0001] The present invention relates to the field of configuration verification, and in particular to a method and device for determining a verification result of a target device, and an electronic device. Background Art

[0002] Faced with the changing external geopolitical factors, driven by uncontrollable international factors and the domestic digital economic transformation needs, replacing and enhancing the autonomous and controllable capabilities of the upstream and downstream of the industrial chain is the only way. Configuration verification is particularly important during the equipment access, project acceptance, daily operation and maintenance, safety inspection, safety compliance inspection, and safety risk assessment process in the power system.

[0003] However, according to the following characteristics, 1. Characteristics of the domestic power system: The domestic power system is large in scale and highly complex, and the system includes multiple links such as power generation, transmission, transformation, distribution, and power consumption. 2. There are many key elements in the automation configuration verification: including host equipment, security equipment, network equipment, database, etc. There are complex associations and dependencies between these elements. 3. Safety and reliability requirements: The power system has very high requirements for safety and reliability in the construction of the automation configuration verification checklist.

[0004] Based on the above characteristics, various existing configuration verification systems often build customized configuration verification checklists according to actual types and projects during implementation. When new projects or devices cannot be met by the checklist, they are supplemented by pushing upgrade packages, patches, etc. This results in inconsistent checklist formats, low reusability, and difficulty in unified management. When checking the target device before executing the task to be executed, conventional verification methods are used for detection, which is not targeted. After the device is updated, it is difficult to update it in a timely manner, resulting in difficulty in accurate and timely verification.

[0005] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0006] The embodiments of the present invention provide a method, device and electronic device for determining the verification result of a target device, so as to at least solve the problem that conventional verification means are used to detect the target device before executing the task to be executed in the related technology, which is not targeted, and it is difficult to update the device in time after the device is updated, resulting in technical problems such as difficulty in accurate and timely verification.

[0007] According to one aspect of an embodiment of the present invention, there is provided a method for determining a verification result of a target device, comprising: receiving a verification instruction sent by a target object, wherein the verification instruction carries a target device identifier; in response to the verification instruction, establishing a remote connection with the target device based on the target device identifier; determining a target verification list based on device parameters of the target device and tasks to be performed, wherein the target verification list includes at least: a target verification item, a target verification operation corresponding to the target verification item, the target verification item being determined based on a reverse tool, the device parameters and the tasks to be performed, and the target verification operation being determined based on the target verification item and the device parameters; and controlling the target device to perform verification based on the target verification list to obtain a verification result.

[0008] Optionally, before determining the target check list based on the device parameters of the target device and the task to be executed, it also includes: determining that the target device executes the execution code file of the task to be executed under the setting of the device parameters; using the reverse tool to analyze the execution code file and recover the script code file; and determining the target check list based on the script code file.

[0009] Optionally, determining the target verification list based on the script code file includes: determining a plurality of candidate verification items based on the script code file, wherein the plurality of candidate verification items are items where abnormalities may occur when executing the script code file; determining target coefficients corresponding to the plurality of candidate verification items, wherein the target coefficients include at least one of the following: a safety coefficient and a correlation coefficient, wherein the safety coefficient indicates the safety impact of not verifying the corresponding item on the task to be executed, and the correlation coefficient indicates the correlation degree of verifying the corresponding item to other verification items; determining a target verification item from the plurality of candidate verification items based on the target coefficients corresponding to the plurality of candidate verification items; establishing the target verification list based on the target verification item and the target verification operation corresponding to the target verification item, wherein, in the case where there are multiple target verification items, the target verification items in the target verification list are arranged in order.

[0010] Optionally, the target verification list is established based on the target verification items and the target verification operations corresponding to the target verification items, including: determining multiple candidate verification operations corresponding to the target verification items; performing encoding operations on the target verification items and the multiple candidate verification operations respectively to obtain multiple groups of feature vectors; determining matching coefficients corresponding to the target verification items and the multiple candidate verification operations respectively based on the multiple groups of feature vectors; determining the target verification operation from the multiple candidate verification operations based on the multiple matching coefficients; and establishing the target verification list based on the target verification items and the target verification operations.

[0011] Optionally, based on the multiple groups of feature vectors, matching coefficients corresponding to the target verification items and the multiple candidate verification operations are determined, including: using a bidirectional long short-term memory network to process the multiple groups of feature vectors respectively, and determine the forward characterization information and the reverse characterization information corresponding to the multiple groups of feature vectors respectively; determining multiple groups of overall vector representations based on the forward characterization information and the reverse characterization information corresponding to the multiple groups of feature vectors respectively; matching the overall vector representation of the target verification items with the overall vector representations corresponding to the multiple candidate verification operations respectively, to obtain the multiple matching coefficients.

[0012] Optionally, based on multiple matching coefficients, a target verification operation is determined from the multiple candidate verification operations, including: determining multiple groups of candidate control sets, wherein each group of candidate control sets includes a reference verification operation and at least one control verification operation, the reference verification operations included in the multiple groups of candidate control sets are different, and the multiple groups of candidate control sets correspond one-to-one to the multiple candidate verification operations; determining a comparison coefficient of the reference verification operation compared to the at least one control verification operation in each group of candidate control sets, wherein the comparison coefficient is a coefficient obtained after comparing at least one of the following performances, and the performance includes: speed performance; based on the multiple comparison coefficients and the multiple matching coefficients, determining the target verification operation from the multiple candidate verification operations.

[0013] Optionally, after controlling the target device to perform verification according to the target verification list and obtaining the verification result, it also includes: when the verification result is passed, controlling the target device to execute the task to be executed, and obtaining the execution result of executing the task to be executed.

[0014] According to one aspect of an embodiment of the present invention, there is provided a device for determining a verification result of a target device, comprising: a receiving module, for receiving a verification instruction sent by a target object, wherein the verification instruction carries a target device identifier; an establishing module, for establishing a remote connection with the target device according to the target device identifier in response to the verification instruction; a calling module, for determining a target verification list according to device parameters of the target device and tasks to be performed, wherein the target verification list includes at least: a target verification item, a target verification operation corresponding to the target verification item, the target verification item being determined according to a reverse tool, the device parameters and the tasks to be performed, and the target verification operation being determined according to the target verification item and the device parameters; and a control module, for controlling the target device to perform verification according to the target verification list to obtain a verification result.

[0015] According to one aspect of an embodiment of the present invention, there is provided an electronic device, comprising: a processor; and a memory for storing instructions executable by the processor; wherein the processor is configured to execute the instructions to implement the method for determining a verification result of a target device as described in any one of the above.

[0016] According to one aspect of an embodiment of the present invention, a computer-readable storage medium is provided. When instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device can execute any of the above-mentioned methods for determining a verification result of a target device.

[0017] In an embodiment of the present invention, a verification instruction sent by a target object is received, wherein the verification instruction carries a target device identifier; in response to the verification instruction, a remote connection with the target device is established based on the target device identifier; a target verification list is determined based on the device parameters of the target device and the tasks to be performed, wherein the target verification list at least includes: a target verification item, a target verification operation corresponding to the target verification item, the target verification item is determined based on the reverse tool, the device parameters and the tasks to be performed, and the verification operation is determined based on the verified item and the device parameters; the target device is controlled to perform verification based on the target verification list to obtain a verification result. Since the target verification list is determined based on the device parameters and the tasks to be performed, wherein the device parameters are involved, in the case of device update, a feasible verification scheme adapted to the current device parameters can also be determined, thereby ensuring the feasibility and accuracy of the verification. Among them, it also involves tasks to be performed. The verification items that can be determined are targeted, rather than conducting extensive traditional verifications, which ensures the speed of verification and solves the problem that conventional verification methods are used to detect target equipment before performing tasks to be performed in related technologies, which is not targeted. After the equipment is updated, it is difficult to update it in a timely manner, resulting in technical problems such as difficulty in accurate and timely verification. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0019] Figure 1 is a flow chart of a method for determining a verification result of a target device according to an embodiment of the present invention;

[0020] Figure 2 It is a schematic diagram of the Checklist construction process provided by an optional embodiment of the present invention;

[0021] Figure 3 It is a schematic diagram of a processing model of a verification system-device-item in RBAC0 provided in an optional embodiment of the present invention;

[0022] Figure 4 4 is a structural block diagram of a device for determining a verification result of a target device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0023] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0025] First, some nouns or terms that appear in the description of the embodiments of the present application are subject to the following explanations:

[0026] SSH: Secure Shell;

[0027] TELNET: Remote Terminal Protocol;

[0028] SMB: Server Message Block protocol (Server Message Block);

[0029] JDBC: Java Database Connectivity;

[0030] WinRM: Windows Remote Management Service (Windows Remote Management);

[0031] RDP: Remote Desktop Protocol (RemoteDesktopProtocol);

[0032] RBAC0: Role-Based Access Control, permission model;

[0033] Crontab tool: Crontab is a tool for setting up tasks to be executed periodically;

[0034] Ollydbg: is a user-mode debugger, mainly used for dynamic debugging of user applications. It provides many powerful functions and windows, such as register window, identifier window, memory window, disassembly window, stack window, breakpoint window and import table window, etc., to help analyze and understand the running process of the program;

[0035] Windbg: Windbg is a powerful user-mode and kernel-mode debugging tool on the Windows platform. It can not only debug applications, but also perform kernel debugging. Windbg supports debugging in both Source and Assembly modes, and provides a variety of views and powerful debugging commands;

[0036] IDA: IDA (Interactive DisAssembler) is a powerful disassembly tool for analyzing and reverse engineering binary files. It can convert binary files into assembly code that is easy to read and understand, and supports multiple processor architectures. IDA also provides interactive interface, decompilation function, dynamic debugging support, plug-in support, and graphical representation.

[0037] C32Asm: C32Asm is a disassembler with disassembly mode and hexadecimal editing mode. It can quickly statically decompile PE format files (such as Exe, Dll, etc.), and provide Hex file editing, memory dump, memory editing and other practical functions. C32Asm can also directly modify the internal code of the software and provide the function of directly modifying the assembly statement;

[0038] Security baseline knowledge base number: CVE (Common Vulnerabilities and Exposures), the security baseline knowledge base number CVE is a system that assigns a unique number to each known public security vulnerability. It standardizes the way vulnerabilities are described, allowing IT personnel and security researchers to understand vulnerability information based on the same language, determine the priority of fixing vulnerabilities, and work hard to resolve vulnerabilities. In addition, the role of CVE also includes enabling different systems to exchange information based on CVE numbers, and security product or security tool developers can use CVE as a baseline to evaluate the product's vulnerability detection coverage. The existence of CVE avoids the need for each IT vendor or security organization to maintain its own vulnerability database in the absence of a unified numbering system, thereby improving the efficiency and security of security information sharing;

[0039] Security baseline: It is the basic requirement for information system security technology, management, operation and other aspects, and is an important means to ensure the security of information systems. It involves four basic elements: identity management, access control, operation monitoring and audit management, as well as security configuration requirements for specific devices or systems such as network equipment, security equipment, operating systems, Web middleware, and database systems. The elements of the security baseline include: service and application settings. For example: only designated users have the right to start services or run applications. Configuration of operating system components. For example: all sample files that come with Internet Information Services (IIS) must be deleted from the computer. Permissions and rights allocation. For example: only administrators have the right to change operating system files. Management rules. For example: the administrator password on the computer is changed every 30 days.

[0040] Example 1

[0041] According to an embodiment of the present invention, an embodiment of a method for determining a verification result of a target device is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0042] Figure 1 is a flow chart of a method for determining a verification result of a target device according to an embodiment of the present invention. Figure 1 As shown, the method comprises the following steps:

[0043] Step S102, receiving a verification instruction sent by a target object, wherein the verification instruction carries a target device identifier;

[0044] In step S102 provided in the present application, a verification instruction sent by a target object is received, wherein the target object may be any entity with the ability to send instructions, such as a remote management system, an automated monitoring platform, or a specific software application, which may be the target device in this scenario. These systems or applications generate and send verification instructions based on certain rules, scheduled tasks, or external triggers (such as user requests). Among them, the target device identifier is also involved. This identifier is unique and is used to clearly indicate which device or system component needs to be verified. It may be a serial number, IP address, MAC address, or a device name that is uniquely registered in the system. The entity that receives the verification instruction is usually a server, middleware, or a device controller that can parse and execute instructions. The receiving end needs to have the ability to parse the instruction content, identify the target device identifier, and perform corresponding verification operations according to the instruction content. Through automated verification instructions, rapid and accurate management of a large number of devices can be achieved, greatly improving management efficiency. No manual inspection is required, reducing labor costs and time consumption.

[0045] Step S104, in response to the verification instruction, establishing a remote connection with the target device according to the target device identifier;

[0046] In step S104 provided in the present application, it is explained that in response to the verification instruction, according to the target device identification, the operation of establishing a remote connection with the target device is explained. After receiving the verification instruction, the response mechanism will be started immediately. This mechanism includes parsing the instruction content, extracting the target device identification, and preparing all resources and parameters required to establish a remote connection. Establishing a remote connection may involve a variety of technologies, such as SSH (Secure Shell Protocol), VPN (Virtual Private Network), Remote Desktop Protocol (such as RDP, VNC), etc. These technologies provide a safe, stable and efficient remote access and communication method. Once the technology and parameters of the remote connection are determined, the system will try to establish a connection with the target device. This process may include steps such as identity authentication (such as passwords, keys, certificates, etc.), encrypted communication negotiation, and the establishment of a data transmission channel. Once the remote connection is successfully established, the system can perform various operations on the target device according to the requirements of the verification instruction, such as status query, performance evaluation, data collection, configuration modification, etc. However, the specific verification operation performed needs to be determined by the following steps.

[0047] Step S106 describes the step of determining the target checklist based on the device parameters of the target device and the tasks to be performed. Among them, device parameters are involved, which refer to the specific properties and values ​​of the target device in terms of physics, software, configuration, etc. They include but are not limited to the model, serial number, operating system version, hardware configuration (such as CPU, memory, storage capacity), network configuration (such as IP address, port number), security settings (such as firewall rules, encryption protocol), etc. of the device. These parameters are an important basis for determining the target checklist because they determine the capabilities and limitations of the device, as well as the specific risks and challenges that may be faced. Among them, tasks to be performed are also involved, which refer to the operations or workloads planned to be performed on the target device. These tasks may include data processing, network communication, storage access, security scanning, etc. The nature and requirements of the tasks to be performed will directly affect the content of the target checklist, because different tasks may have different requirements for the performance, stability, security, etc. of the device.

[0048] Among them, a target checklist is also involved. Based on the device parameters of the target device and the specific requirements of the task to be performed, a detailed target checklist can be formulated. This list will include a series of items and indicators that need to be verified to ensure that the device meets all necessary conditions and requirements before performing the task. The process of formulating the checklist may need to consider multiple factors, such as device compatibility, performance bottlenecks, security risks, etc.

[0049] It should be noted that the target verification list at least includes: target verification items, target verification operations corresponding to the target verification items, target verification items determined based on reverse tools, equipment parameters and tasks to be performed, and target verification operations determined based on target verification items and equipment parameters. It can be seen that the verification items in the target verification list are determined based on equipment parameters. Therefore, in the case of equipment update, a feasible verification scheme adapted to the current equipment parameters can also be determined, ensuring the feasibility and accuracy of the verification. Among them, it also involves tasks to be performed, and the verification items that can be determined are targeted, rather than conducting extensive traditional verification, which ensures the speed of verification, thereby solving the problem in the related technology that when the target equipment is verified before executing the tasks to be performed, conventional verification means are used for detection, which is not targeted, and after the equipment is updated, it is difficult to update in a timely manner, resulting in technical problems such as difficulty in accurate and timely verification.

[0050] In step S106 provided in the present application, a target check list is determined based on the device parameters of the target device and the tasks to be performed;

[0051] Among them, the target checklist is involved: this is a detailed list of items, parameters, conditions or steps that need to be checked. It may include information on the device's hardware status, software version, configuration settings, performance indicators, security settings, etc. The target checklist is an indispensable reference during the verification process to ensure the comprehensiveness and accuracy of the verification.

[0052] Step S108, controlling the target device to perform verification according to the target verification list to obtain a verification result.

[0053] In step S108 provided in the present application, a control instruction is sent to the target device through a previously established remote connection or other communication method to start or guide the device to perform a specific task or operation. These control instructions may be triggered by a verification instruction, which is intended to allow the device to enter a state to be verified or to execute a verification procedure. After receiving the control instruction, the target device will be checked one by one according to the requirements in the target verification list. This may involve a series of operations such as reading the device status, executing a test program, comparing data differences, and verifying the correctness of the configuration. The verification process may be completed by an automated program built into the device, or manual intervention and judgment may be performed. After a series of verification operations, the target device will generate and return the verification results. These results may be presented in the form of log files, status codes, reports, etc., including data collected during the verification process, problems found, and conclusions on whether the verification criteria are met. By verifying according to the target verification list, it can be ensured that the target device meets the established standards and requirements in terms of hardware, software, configuration, performance, etc., thereby improving the compliance and reliability of the device.

[0054] Through the above steps S102-S108, the verification instruction sent by the target object is received, wherein the verification instruction carries the target device identification; in response to the verification instruction, a remote connection with the target device is established based on the target device identification; based on the device parameters of the target device and the tasks to be performed, a target verification list is determined, wherein the target verification list at least includes: target verification items, target verification operations corresponding to the target verification items, the target verification items are determined based on the reverse tool, the device parameters and the tasks to be performed, and the verification operations are determined based on the verified items and the device parameters; the target device is controlled to perform verification based on the target verification list to obtain the verification results. Since the target verification list is determined based on the device parameters and the tasks to be performed, wherein the device parameters are involved, in the case of device update, a feasible verification scheme adapted to the current device parameters can also be determined, thereby ensuring the feasibility and accuracy of the verification. Among them, it also involves tasks to be performed. The verification items that can be determined are targeted, rather than conducting extensive traditional verifications, which ensures the speed of verification and solves the problem that conventional verification methods are used to detect target equipment before performing tasks to be performed in related technologies, which is not targeted. After the equipment is updated, it is difficult to update it in a timely manner, resulting in technical problems such as difficulty in accurate and timely verification.

[0055] As an optional embodiment, before determining the target check list based on the device parameters of the target device and the tasks to be executed, it also includes: based on the device parameters of the target device and the tasks to be executed; determining the execution code file of the target device to execute the tasks to be executed under the settings of the device parameters; using a reverse tool to analyze the execution code file and recover the script code file; and determining the target check list based on the script code file.

[0056] In this embodiment, the step of determining the target check list according to the device parameters of the target device and the tasks to be executed is described. In this step, the target device can be based on the device parameters and the tasks to be executed. Determine the target device to execute the execution code file of the task to be executed under the setting of the device parameters. That is, when executing the task to be executed, the predetermined task will be triggered or executed by executing a specific code file. These code files usually contain instructions or algorithms for functions such as controlling device behavior, processing data, and interacting with external systems. They can be binary executable files or any other form of program code. When the user executes the task, the Crontab tool can be used to import the configuration table. At this time, reverse engineering technology may be adopted, and the common tools such as Ollydbg, Windbg, IDA, C32Asm and other tools may be used for disassembly and debugging. The binary executable code of the Crontab tool is analyzed to obtain the algorithm details and implementation principles of the program, and the assembly code is analyzed to further restore the high-level abstract code. That is, the reverse tool is used to analyze the execution code file, and the script code file is recovered, and then according to the script code file, it is determined which items to be checked and the corresponding operations to determine the target check list. In this way, the determined verification items can be more targeted and accurate.

[0057] As an optional embodiment, determining a target verification list based on a script code file includes: determining a plurality of candidate verification items based on the script code file, wherein the plurality of candidate verification items are items where abnormalities may occur when executing the script code file; determining target coefficients corresponding to the plurality of candidate verification items, wherein the target coefficient includes at least one of the following: a safety coefficient and a correlation coefficient, wherein the safety coefficient indicates the safety impact of not verifying the corresponding item on the task to be executed, and the correlation coefficient indicates the degree of correlation of verifying the corresponding item with other verification items; determining a target verification item from the plurality of candidate verification items based on the target coefficients corresponding to the plurality of candidate verification items; establishing a target verification list based on the target verification item and the target verification operation corresponding to the target verification item, wherein, in the case where there are multiple target verification items, the target verification items in the target verification list are arranged in order.

[0058] In this embodiment, it is described that determining a target check list based on a script code file includes: determining multiple candidate check items based on the script code file, wherein the multiple candidate check items are items that may cause abnormalities when executing the script code file. When executing a script code file, a variety of abnormal items may be encountered, and these abnormalities usually arise from errors in the code itself, limitations of the external environment, insufficient resources, or changes in runtime conditions. By listing items that may cause abnormalities, it is possible to avoid tasks that may occur during the subsequent execution of tasks to be executed.

[0059] Determine the target coefficients corresponding to multiple candidate verification items, wherein the target coefficient includes at least one of the following: safety coefficient, correlation coefficient, the safety coefficient indicates the safety impact of not verifying the corresponding item on the task to be executed, and the correlation coefficient indicates the correlation degree of the corresponding item to other verification items. Among them, for the safety coefficient, it is determined that when the verification item is not executed, the safety impact on the execution of the task to be executed, if the safety impact is small, the item can be executed with a lower probability, if the safety is greater, the item can be executed with a higher probability. Among them, for the correlation coefficient, it is determined that the correlation degree and influence degree of the verification item on other items, specifically, whether the execution of the item will have an impact on other items, such as whether the execution of the item can reflect the test results of other items to a certain extent.

[0060] For example, you can also decide to execute the project and make further decisions with the idea of ​​looking forward and reasoning backward. Analyze the expected results of adding forward prediction in what order and at what time. Reason backward about the threat coefficient. Clarify whether to choose all possible subsequent reactions, as well as the results of subsequent reactions, until the end of the game. Then start from the last step and work backward to determine the best choice for each choice, so as to determine the priority order based on the above considerations.

[0061] According to the target coefficients corresponding to the multiple candidate verification items, the target verification items are determined from the multiple candidate verification items, and when there are multiple target verification items, the target verification items in the target verification list are arranged in order. Then, according to the target verification items and the target verification operations corresponding to the target verification items, a target verification list is established, so that the determined target verification list can reflect the quality of the target device in executing the task to be executed to the greatest extent and the fastest.

[0062] As an optional embodiment, a target verification list is established based on target verification items and target verification operations corresponding to the target verification items, including: determining multiple candidate verification operations corresponding to the target verification items; encoding the target verification items and the multiple candidate verification operations respectively to obtain multiple groups of feature vectors; determining matching coefficients corresponding to the target verification items and the multiple candidate verification operations respectively based on the multiple groups of feature vectors; determining the target verification operation from the multiple candidate verification operations based on the multiple matching coefficients; and establishing a target verification list based on the target verification items and the target verification operations.

[0063] In this embodiment, the process of establishing a target verification list is described, wherein multiple groups of feature vectors include feature vectors corresponding to target verification items and feature vectors corresponding to multiple candidate verification operations. When constructing a list for guiding the verification of target devices, it is first necessary to clarify which items need to be verified, namely, target verification items. These items may involve multiple aspects of the device, such as performance parameters, security settings, operating status, etc. Next, in order to effectively verify each target verification item, it is necessary to prepare multiple candidate verification operations. These candidate operations represent different methods and steps that may be used to verify the status of the target verification item. For example, for the target verification item "power stability", the candidate verification operations may include measuring voltage fluctuations, checking the status of the power indicator light, recording the history of power failures, etc. In order to select the most suitable verification operation from a large number of candidate operations, the system will perform encoding operations on the target verification items and candidate verification operations respectively. The encoding operation is usually to convert text or conceptual descriptions into numerical or vector forms that can be processed by computers, namely feature vectors. This process may involve natural language processing, text vectorization, feature extraction and other technologies to capture key information of each item and operation. With multiple sets of feature vectors, the system can use machine learning, similarity calculation or other algorithms to evaluate the degree of match between the target verification item and each candidate verification operation. This step generates multiple matching coefficients, each of which represents the strength of association or applicability between a candidate operation and the target item. Finally, the system selects the verification operation that best matches the target verification item from the candidate verification operations based on these matching coefficients, namely the target verification operation. This process may involve strategies such as threshold setting and sorting selection. Once the target verification operation is determined, it can be associated with the target verification item to build a complete target verification list. This list will serve as the basis for the subsequent verification process and guide how to conduct detailed inspection and verification of the target device. In this way, the accuracy and pertinence of the verification can be improved. By accurately matching the target verification item with the verification operation, the verification process can be ensured to be more accurate and effective, and the risk of misjudgment and missed detection can be reduced. The verification process can also be optimized. The process of automatically selecting the verification operation reduces manual intervention and improves the efficiency and consistency of the verification process. At the same time, the verification list can be dynamically adjusted according to the actual situation to adapt to different verification needs and scenarios. It can also enhance the flexibility and scalability of the system. The selection mechanism based on the matching coefficient provides a basis for intelligent decision-making for the system, and can automatically adjust the verification strategy according to different verification requirements and priorities to improve the user experience.

[0064] As an optional embodiment, matching coefficients corresponding to target verification items and multiple candidate verification operations are determined based on multiple groups of feature vectors, including: using a bidirectional long short-term memory network to process the multiple groups of feature vectors respectively, and determining the forward characterization information and the reverse characterization information corresponding to the multiple groups of feature vectors; determining multiple groups of overall vector representations based on the forward characterization information and the reverse characterization information corresponding to the multiple groups of feature vectors; matching the overall vector representation of the target verification item with the overall vector representation corresponding to the multiple candidate verification operations, and obtaining multiple matching coefficients.

[0065] In this embodiment, a method for determining multiple matching coefficients is described. First, a bidirectional long short-term memory network (Bi-LSTM) can be used to process multiple groups of feature vectors. In the field of deep learning and natural language processing (NLP), a bidirectional long short-term memory network (Bi-LSTM) is a powerful sequence model that can simultaneously capture forward and backward dependencies in sequence data. When processing multiple groups of feature vectors, each group of feature vectors may represent information of different dimensions or different sources. Bi-LSTM processes these feature vectors through its two independent LSTM layers (one forward and one backward) to generate forward characterization information and reverse characterization information corresponding to each feature vector. These characterization information not only contains the information of the current feature, but also incorporates the contextual information of its context (the previous and next time steps in time series data). Then, based on the forward characterization information and reverse characterization information corresponding to multiple groups of feature vectors, multiple groups of overall vector representations are determined. After obtaining the forward and reverse characterization information of each group of feature vectors, they are usually fused in some form (such as splicing, summing, or weighted sum) to form the overall vector representation of the group of features. This overall vector representation integrates the forward and reverse information, and more comprehensively reflects the essential characteristics of the group of features. The multiple groups of overall vector representations include the overall vector representation of the target verification item and the overall vector representation of multiple candidate verification operations. Therefore, multiple matching coefficients can be obtained by matching the overall vector representation of the target verification item with the overall vector representation of the candidate verification operations. That is, it is necessary to determine the similarity or correlation between a target verification item (such as a user query, an item to be recommended, a question) and multiple candidate verification operations. By matching the overall vector representation of the target verification item with the overall vector representation of each candidate verification operation (such as using cosine similarity, dot product, etc. as matching coefficients), a series of matching coefficients can be obtained. These coefficients reflect the degree of similarity between the target and the candidate, so that the matching coefficient can be used to determine which verification operation to adopt.

[0066] As an optional embodiment, a target verification operation is determined from multiple candidate verification operations based on multiple matching coefficients, including: determining multiple groups of candidate control sets, wherein each group of candidate control sets includes a reference verification operation and at least one control verification operation, the reference verification operations included in the multiple groups of candidate control sets are different, and the multiple groups of candidate control sets correspond one-to-one to the multiple candidate verification operations; determining a comparison coefficient of the reference verification operation compared to the at least one control verification operation in each group of candidate control sets, wherein the comparison coefficient is a coefficient obtained after comparing at least one of the following performances, and the performances include: speed performance; determining the target verification operation from multiple candidate verification operations based on multiple comparison coefficients and multiple matching coefficients.

[0067] In this embodiment, the process of determining the target verification operation from multiple candidate verification operations is described. When building a verification system, in order to ensure that the selected verification operation meets the actual needs and has a high execution efficiency, the system first prepares multiple sets of candidate control sets. These sets are carefully designed, and each set contains a specific reference verification operation and at least one verification operation that is compared with it. Importantly, the reference verification operations in the multiple sets are different from each other, which means that the system comprehensively evaluates the candidate verification operations from multiple different angles and benchmarks. The core of each set of candidate control sets is to compare the performance differences between the reference verification operation and the control verification operation. This comparison is not arbitrary, but based on a series of key performance indicators, including but not limited to speed performance. Speed ​​performance is an important indicator for measuring the execution efficiency of the verification operation, which reflects the time or resource consumption required to complete the operation. In addition to speed performance, other performance indicators may also be considered, such as accuracy, stability, resource utilization, etc., depending on the needs and scenarios of the verification task. Through comparison, the system generates one or more comparison coefficients for each candidate control set. These coefficients are quantified differences in performance indicators, which reflect the advantages or disadvantages of the reference verification operation relative to the control verification operation in one or more performance dimensions. The system will then combine these comparison coefficients with the matching coefficients mentioned above to more comprehensively evaluate the suitability and superiority of the candidate verification operations. The matching coefficients may be calculated based on the feature vector similarity or other relevant indicators between the target verification item and the candidate verification operation. They reflect the direct connection and degree of match between the operation and the item. Finally, the system will determine the target verification operation from multiple candidate verification operations based on the comprehensive evaluation results of multiple comparison coefficients and matching coefficients. This process may involve complex decision-making algorithms or rules to ensure that the selected operation performs well in multiple dimensions. This ensures that the optimal operation is selected.

[0068] As an optional embodiment, controlling the target device to perform verification according to the target verification list, and after obtaining the verification result, further includes: when the verification result is passed, controlling the target device to execute the task to be executed, and obtaining the execution result of the task to be executed.

[0069] In this embodiment, the target device is controlled to be checked according to the target check list. Once the control system starts the check process, it will check each item in the check list one by one and collect the corresponding data or status information. The check result will directly reflect whether the target device is ready to perform the task to be assigned. If all the check items meet the requirements, that is, the check result is "check passed", the control system will further perform the next step - control the target device to start executing the task to be executed. The execution of the task may involve a series of complex operations, including but not limited to data processing, physical actions (such as moving, grabbing), network communication, etc. During the execution process, the system will monitor the progress of the task in real time and collect the execution results after the task is completed. These execution results can be used to evaluate the success of the task and serve as a basis for subsequent decision-making or optimization. In this way, the success rate of task execution can be improved, that is, through prior verification, it can be ensured that the target device performs the task in the best state, thereby reducing the risk of task failure caused by device failure or configuration error. It can also enhance system security. The verification of safety requirements helps prevent potential safety accidents and protect personnel and equipment from injury or damage. Improve system reliability. Regular inspection and maintenance can help to find and solve potential problems early, thereby extending the service life of the equipment and reducing the occurrence of sudden failures. It can also enhance the degree of automation. The high degree of automation of the entire inspection and execution process reduces the need for manual intervention and improves the automation level and operating efficiency of the overall system.

[0070] Based on the above embodiments and optional embodiments, an optional implementation is provided, which is described in detail below.

[0071] In an optional implementation manner of the present invention, a method for determining the verification results of a target device is provided, which can also be referred to as a method for constructing an automated configuration verification Checklist for an electric power system. This is to solve and improve the problems of inconsistent formats, low reusability, and difficulty in unified management faced when constructing traditional checklists. In order to solve this problem, the method provided in an optional implementation manner of the present invention combines the characteristics of the electric power system itself, widely collects standards and specifications, and analyzes the potential safety hazards that can be caused by actual configuration. Contains 13+ types of verification item types for selection. Intelligent combination and matching are performed based on the different characteristics of each type of electric power system. This innovative method not only improves the compatibility and accuracy of configuration verification, but also saves manpower and material resources in the later stage. It provides new ideas for the construction of automated configuration verification Checklists for electric power systems, and further provides favorable support for the development and implementation of configuration verification systems.

[0072] The key points involved in the method provided by the optional embodiment of the present invention are introduced below:

[0073] 1. Use reverse engineering technology to analyze the configuration files of important functions (same as using reverse tools to analyze the execution code files and recover the script code files):

[0074] The firmware files of common power secondary equipment are obtained through firmware extraction technology, and then reverse engineering software is used to reverse analyze the important programs. First, analyze the functions and services to understand which configuration files are imported when the functions and programs are enabled. When calling, reverse analyze the parsing process of the configuration files and restore the original script code files. Prepare for the subsequent determination of the composition of the Checklist.

[0075] 2. Determine the content of the Checklist through reverse induction:

[0076] The power system is numerous and complex in structure, containing multiple verification requirements and indicators. If multiple demand indicators are selected according to the verification order used in the past, it will undoubtedly interfere with the final effect of the configuration verification. The idea of ​​reverse induction with forward outlook and backward reasoning is used to decide whether the verification order of each step is the optimal choice, so as to determine the verification items and the execution steps of the verification items.

[0077] 3. RBAC0 (Role-Based Access Control) permission model:

[0078] The RBAC0 model includes three entity sets: users (U), roles (R), and permissions (P). The relationship between users and roles is many-to-many, and the relationship between roles and permissions is many-to-many, that is, the design of the final table is based on the idea of ​​role-based access control. For example, the multiple user permissions of the equipment (System, super administrator user, administrator user, ordinary user, visitor) are checked, and the specific details of the different check lists correspond to different user permissions. It consists of the name of the verification project, the number of the safety baseline knowledge base under the power system, the safety baseline description, the detection operation steps, the judgment basis, the rectification suggestions, the weight, the remarks, etc. Fill in the different internal information contents according to the model.

[0079] Through the setting of the above key points, the optional implementation mode of the present invention proposes to reversely analyze the important programs of the power equipment through reverse engineering technology based on the construction of the Checklist in the traditional configuration verification, and analyze how the program parses the configuration file. This is used as a component of the CheckList, and then the reverse induction method is used to reversely determine whether the item is the best choice. Then the table is constructed through the basic model of RBAC0. It is closely combined with the actual equipment situation, standardizes the configuration process, enhances the efficiency and accuracy of configuration management, reduces maintenance costs, and this Checklist construction idea is not limited to the power industry. It is also suitable for reference for similar configuration verification needs.

[0080] In a relatively detailed application scope, the method provided by the optional implementation mode of the present invention can focus on the following application scenarios:

[0081] (1) Construction and maintenance of power supply systems: Perform automated configuration checks in new or existing power supply systems, including but not limited to substations, transmission lines, and distribution networks. Ensure that all components and subsystems are configured correctly and in compliance with national power equipment usage policies.

[0082] (2) System configuration of power plants: Ensure that the automation control and protection systems of thermal power, hydropower, wind power and photovoltaic power generation systems are fully configured correctly during the design and operation process.

[0083] (3) Power supply for critical infrastructure: Applied to infrastructure that is highly dependent on continuous and stable power supply, such as hospitals, traffic control centers, and data centers. Use automated configuration checklists to ensure that critical power equipment, backup power systems, etc. are correctly deployed as required and operate in optimal conditions.

[0084] (4) Smart City Projects: Cooperate with smart grid and smart energy management projects under the smart city framework, and intervene in the configuration of systems and equipment such as smart meters, smart homes, and demand response management.

[0085] In these application scenarios, the construction of the checklist may include but is not limited to domestic equipment selection verification, software and firmware version verification, security policy inspection, standardized configuration review, and performance benchmark comparison, aiming to achieve comprehensive supervision and management of power system configuration.

[0086] The steps of the method provided by the optional embodiment of the present invention are introduced below:

[0087] As a powerful supplement to traditional vulnerability scanning products, configuration verification can help users discover configuration defects and management loopholes in networks and applications, and help users improve the security strength of networks and application systems. By conducting compliance and security checks on the target system, non-compliant items are found and security measures are selected and implemented to control security risks. In the actual configuration verification implementation process, the steps are simplified into four steps: connecting devices, building and selecting verification lists, running, and analyzing results.

[0088] The following is a brief overview of the configuration verification steps. First, connect the device: the configuration verification system first responds to the command issued by the user. The UI interface passes the target device IP, user name, and password entered by the operator to the device configuration data collection module, and the module begins to collect configuration data. According to the preset remote login method, choose to call different remote connection submodules SSH, TELNET, SMB, JDBC, WinRM, and RDP. In this way, the target device is successfully connected. Secondly, the check list is constructed and selected: this content is described in detail in the next paragraph. Then run the script: according to the remote connection protocol, the script command is handed over to the target device for execution in different ways, and the collected device configuration (that is, the execution result of the script command) is saved in real time to an XML file. Finally, the results are analyzed: the scan results are combined with the Checklist for result analysis and completion of the verification report. At this point, the configuration verification of a single device is completed.

[0089] The focus of the optional implementation of the present invention is on the second link of the above four links, which can also be considered as the link between connecting the device to the operation and the construction process of the configuration checklist. Figure 2 is a schematic diagram of a Checklist construction process provided by an optional embodiment of the present invention, such as Figure 2 As shown in the figure, the early information of CheckList is collected through various means such as reverse analysis, reverse induction, and reference standards. Then, the reverse induction method is used uniformly for forward prospecting and backward reasoning. The main logic is obtained. The RBAC0 tabulation model is further used for storage. If it is considered that the standard is not met on this basis, the above steps will be repeated.

[0090] Specifically, in a complete configuration verification system, there are hundreds of verification items and verification standards, and there are also many items in the safety level protection evaluation requirements. However, in actual situations, it is not necessary and impossible to verify all of a single device. The problem lies in selecting a strategy, that is, building a strategy. This link is considered as the main logic of the Checklist. The optional implementation of the present invention is also based on this. The Checklist is composed of a list of multiple (verification project name, safety baseline knowledge base number under the power system, safety baseline description, detection operation steps, judgment basis, rectification suggestions, weights, notes and other fields). According to different equipment types, different Checklists will be generated when executing different tasks, and different components will be selected. For example, the names of the inspection items are "user scheduled tasks" and "key file md5 collection" respectively. When choosing between the two inspection items, first, they are clearly defined by consulting relevant standards. A large number of query work uses a deep semantic matching model, and a bidirectional LSTM is used to process the tasks to be executed and the above two inspection items respectively. Then, the matching degree corresponding to the output of the LSTM is determined. The process of determining the matching degree can be to interact the vectors at each moment and generate an interactive tensor using a tensor function.

[0091]

[0092] Among them, u and v represent two vectors respectively, and Mi,i∈[1,…,c] is a slice of the tensor. Wuv and b are the parameters of the linear transformation. f is a nonlinear function. The result after the tensor function transformation is a vector. Then the matching matrix is ​​subjected to K-Max dynamic pooling operation, that is, the K largest features are selected, and finally the fully connected layer is used for dimensional compression and classification. Thus, standard fast query and deceleration are performed. This matching model greatly speeds up the time cost of the query. Then, the verification items corresponding to the task to be performed can be determined.

[0093] Then, when establishing the properties of a single item in the Checklist, such as determining which operation to use to execute the corresponding check item. For example, when determining the operation of the check item name as "user scheduled task", the Crontab tool (Crontab is a tool for setting periodic tasks) will import the configuration table. At this time, reverse engineering technology may be adopted (not every checklist item needs reverse engineering). Through common tools such as Ollydbg, Windbg, IDA, C32Asm, etc., disassembly and debugging methods are used to analyze the binary executable code of the Crontab tool to obtain the algorithm details and implementation principles of the program, and the assembly code is analyzed to further restore the high-level abstract code. The purpose is to analyze the internal logic in detail and clarify the threat coefficient. After completing the reverse engineering of the relevant content of "user scheduled task", the decision is made to add it to the pending Checklist after clarifying the threat coefficient. When multiple items are added, the reverse induction method is used to make further decisions with the idea of ​​forward prospecting and backward reasoning. Analyze in what order, at what time, whether to add forward prediction, what expected results will there be. Backward reasoning threat coefficient. Clarify all possible subsequent reactions and the results of subsequent reactions until the game ends. Then work backwards from the last step to determine the best choice for each selection. Thus, the appropriate and optimal checklist can be determined from the complex checklist items through this idea. The "user scheduled task" under a certain execution operation is a predetermined value. Thus, the "user scheduled task" under the execution operation is determined to be the best choice. Then, the above single attribute field is designed through the RBAC0 basic model for role-based access control.

[0094] Figure 3 is a schematic diagram of a processing model of a verification system-device-item in RBAC0 provided by an optional embodiment of the present invention, such as Figure 3 That is, under different system permissions, the attribute fields are not exactly the same. It is whether the user level of the power system can perform a certain operation on what Checklist item. It is necessary to solve whether the value of this logical expression is true. That is, when designing the "user scheduled task", multiple and different result definitions should be made according to the solution results of the logical expression. The Checklist established in this way has the invention advantage of a new starting point. Judge and repeat the above steps many times. Finally, the Checklist is established.

[0095] The above steps are the construction method of the Checklist. On the one hand, it is used to upload the database storage or operation log. On the other hand, it can be used as the Checklist used for this configuration verification. Table 1 is a schematic table of the Checklist, and the Checklist table is shown in Table 1.

[0096] Table 1

[0097]

[0098]

[0099] Through the above optional implementation, at least the following beneficial effects can be achieved:

[0100] (1) Replace the traditional method: When constructing the checklist, most traditional methods only refer to the security level protection assessment requirements, and do not build it according to the actual scenario. The optional implementation method of the present invention conducts targeted reverse engineering analysis and reverse induction on the power equipment, which is closely combined with the actual equipment situation;

[0101] (2) Standardized configuration process: To ensure that all configurations of the power system during deployment and operation meet the established standards and specifications, the configuration process is standardized and normalized. The optional implementation method of the present invention performs standardized configuration through multiple reverse inductions, forward result deductions, and reverse verification item selection;

[0102] (3) Enhanced configuration management efficiency and accuracy: The checklist generated by the optional implementation of the present invention can help the automated configuration check to timely discover configuration errors or anomalies, speed up the troubleshooting and diagnosis process, and improve the stability and reliability of the power system. The checklist is determined through multiple selections and summaries to achieve this goal.

[0103] (4) Reducing maintenance costs: The checklist generated by the optional implementation method of the present invention results in the final configuration verification result being able to effectively discover and resolve configuration deviations, reduce the possibility of system errors, and thus reduce the number of maintenance times and cost expenditures.

[0104] (5) Promote knowledge sharing and best practice application: This construction method can promote knowledge sharing on equipment optimization configuration, learn from and promote best practices. The optional implementation method of the present invention proposes the Checklist construction idea not only in the power industry, but also in the same configuration verification requirements.

[0105] (6) It is superior to the traditional method of completely relying on consulting standards to establish a single checklist. In the assembly, the entire checklist is determined by simple matching. Through the proposed new construction ideas and methods, the labor cost is optimized, and the compatibility and accuracy of the checklist in the configuration verification are improved. The proposed optional implementation method of this invention is in the core logic link of the configuration verification. It can further help users discover configuration defects and management loopholes in the network and application, and help users improve the security strength of the network and application system.

[0106] It should be noted that, for the above-mentioned method embodiments, for the sake of simplicity, they are all described as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence, because according to the present invention, certain steps can be performed in other sequences or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

[0107] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods of various embodiments of the present invention.

[0108] Example 2

[0109] According to an embodiment of the present invention, there is also provided a device for implementing the above-mentioned method for determining a verification result of a target device. Figure 4 is a structural block diagram of a device for determining a verification result of a target device according to an embodiment of the present invention. Figure 4 As shown, the device includes: a receiving module 402, a establishing module 404, a calling module 406 and a control module 408. The device is described in detail below.

[0110] The receiving module 402 is used to receive a verification instruction sent by a target object, wherein the verification instruction carries a target device identifier;

[0111] An establishing module 404, connected to the receiving module 402, for establishing a remote connection with the target device in response to the verification instruction and according to the target device identifier;

[0112] The calling module 406 is connected to the establishing module 404, and is used to determine a target verification list according to the device parameters of the target device and the tasks to be performed, wherein the target verification list at least includes: target verification items, target verification operations corresponding to the target verification items, the target verification items are determined according to the reverse tool, the device parameters and the tasks to be performed, and the target verification operations are determined according to the target verification items and the device parameters;

[0113] The control module 408 is connected to the calling module 406 and is used to control the target device to perform verification according to the target verification list to obtain the verification result.

[0114] It should be noted here that the above-mentioned receiving module 402, establishing module 404, calling module 406 and control module 408 correspond to steps S102 to S108 in the method for determining the verification results of the target device, and the instances and application scenarios implemented by multiple modules and corresponding steps are the same, but are not limited to the contents disclosed in the above-mentioned embodiment 1.

[0115] Example 3

[0116] According to another aspect of an embodiment of the present invention, there is also provided an electronic device, comprising: a processor; and a memory for storing processor executable instructions, wherein the processor is configured to execute instructions to implement any of the above methods for determining a verification result of a target device.

[0117] Example 4

[0118] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided. When instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device can execute any of the above-mentioned methods for determining a verification result of a target device.

[0119] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0120] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0121] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0122] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0123] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0124] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or part of the contribution to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0125] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A method for determining a verification result of a target device, characterized in that: include: Receiving a verification instruction sent by a target object, wherein the verification instruction carries a target device identifier; In response to the verification instruction, establishing a remote connection with the target device according to the target device identifier; Determine a target verification list according to the device parameters of the target device and the tasks to be performed, wherein the target verification list at least includes: target verification items, target verification operations corresponding to the target verification items, the target verification items are determined according to the reverse tool, the device parameters and the tasks to be performed, and the target verification operations are determined according to the target verification items and the device parameters; The target device is controlled to perform verification according to the target verification list to obtain a verification result.

2. The method according to claim 1, characterized in that According to the device parameters of the target device and the tasks to be performed, a target check list is determined, including: Determine that the target device executes the execution code file of the task to be executed under the setting of the device parameters; Analyze the execution code file using the reverse tool to recover the script code file; The target check list is determined according to the script code file.

3. The method according to claim 2, characterized in that Determine the target check list according to the script code file, including: Determine a plurality of candidate verification items according to the script code file, wherein the plurality of candidate verification items are items where abnormalities may occur when executing the script code file; Determine target coefficients corresponding to the plurality of candidate verification items, respectively, wherein the target coefficients include at least one of the following: a safety coefficient, and a correlation coefficient, wherein the safety coefficient indicates the safety impact of not verifying the corresponding item on the task to be performed, and the correlation coefficient indicates the correlation degree of verifying the corresponding item to other verification items; Determining a target verification item from the plurality of candidate verification items according to the target coefficients respectively corresponding to the plurality of candidate verification items; The target verification list is established according to the target verification items and the target verification operations corresponding to the target verification items, wherein, in the case where there are multiple target verification items, the target verification items in the target verification list are arranged in sequence.

4. The method according to claim 3, characterized in that The target verification list is established according to the target verification items and the target verification operations corresponding to the target verification items, including: Determining a plurality of candidate verification operations corresponding to the target verification item; Performing encoding operations on the target verification item and the multiple candidate verification operations respectively to obtain multiple groups of feature vectors; Determining, based on the multiple groups of feature vectors, matching coefficients corresponding to the target verification items and the multiple candidate verification operations respectively; Determining a target verification operation from the plurality of candidate verification operations according to a plurality of matching coefficients; The target verification list is established according to the target verification items and the target verification operations.

5. The method according to claim 4, characterized in that Determining matching coefficients corresponding to the target verification items and the plurality of candidate verification operations respectively according to the plurality of sets of feature vectors includes: Using a bidirectional long short-term memory network to process multiple groups of feature vectors respectively, and determine the positive representation information and the negative representation information corresponding to the multiple groups of feature vectors respectively; Determine multiple groups of overall vector representations according to the forward characterization information and the reverse characterization information respectively corresponding to the multiple groups of feature vectors; The overall vector representation of the target verification item is matched with the overall vector representations corresponding to the multiple candidate verification operations respectively to obtain the multiple matching coefficients.

6. The method according to claim 4, characterized in that Determining a target verification operation from the plurality of candidate verification operations according to the plurality of matching coefficients includes: Determining a plurality of candidate control sets, wherein each candidate control set includes a reference verification operation and at least one control verification operation, the reference verification operations included in the plurality of candidate control sets are all different, and the plurality of candidate control sets correspond one-to-one to the plurality of candidate verification operations; Determine a comparison coefficient of the reference verification operation compared to the at least one comparison verification operation in each candidate comparison set, wherein the comparison coefficient is a coefficient obtained by comparing at least one of the following performances, the performance comprising: speed performance; A target verification operation is determined from the plurality of candidate verification operations according to the plurality of comparison coefficients and the plurality of matching coefficients.

7. The method according to any one of claims 1 to 6, characterized in that: Controlling the target device to perform verification according to the target verification list, and after obtaining the verification result, further comprising: When the verification result is that the verification is passed, the target device is controlled to execute the task to be executed, and an execution result of executing the task to be executed is obtained.

8. A device for determining a verification result of a target device, characterized in that: include: A receiving module, used to receive a verification instruction sent by a target object, wherein the verification instruction carries a target device identifier; An establishing module, configured to establish a remote connection with a target device in response to the verification instruction and according to the target device identifier; A calling module, configured to determine a target verification list according to the device parameters of the target device and the tasks to be performed, wherein the target verification list at least includes: a target verification item, a target verification operation corresponding to the target verification item, the target verification item being determined according to the reverse tool, the device parameters and the tasks to be performed, and the target verification operation being determined according to the target verification item and the device parameters; The control module is used to control the target device to perform verification according to the target verification list to obtain a verification result.

9. An electronic device, characterized in that: include: processor; a memory for storing instructions executable by the processor; The processor is configured to execute the instructions to implement the method for determining a verification result of a target device as claimed in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: When the instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the method for determining a verification result of a target device according to any one of claims 1 to 7.

Images