Cyber space simulation construction and hierarchical display method

Abstract

The application discloses a network space simulation construction and analysis display method, which comprises the following steps: editing and setting multiple types of network entity models and network relationship models, storing the network entity models and the network relationship models into a database, outputting the network entity models and the network relationship models from the database, constructing corresponding network simulation entities and a simulation target network, and performing hierarchical display on the simulation target network and the network simulation entities. The method can effectively realize simulation construction of the network space, can display the network architecture as a whole and display network composition details, and is favorable for intuitive network analysis and feature presentation.

Description

Technical Field

[0001] This invention relates to the field of computer simulation technology, and in particular to a method for constructing and displaying a network space simulation in a hierarchical manner. Background Technology

[0002] In the existing technology, there is an increasing demand for modeling and simulation analysis of cyberspace. However, since the target network of the simulation is usually complex and includes various types of network simulation entities, when it is necessary to analyze these network simulation entities, a contradiction will occur in the display. That is, it is impossible to simultaneously show the macroscopic architectural relationship of the network and the microscopic characteristics of the network simulation entities. Summary of the Invention

[0003] The main technical problem solved by this invention is to provide a method for constructing and displaying network space simulations in a hierarchical manner, which solves the problem in the prior art that when analyzing and presenting the simulation target network, it is not possible to effectively balance the display of network architecture analysis and the display of network composition details.

[0004] To address the aforementioned technical problems, one technical solution adopted by this invention is to provide a method for constructing and displaying a network space simulation in a hierarchical manner, comprising the following steps:

[0005] Construct a network entity model, edit and set various types of network entity models and network relationship models, and store the network entity models and network relationship models in a database;

[0006] Construct network simulation entities, output the network entity model and network relationship model from the database, and construct the corresponding network simulation entities and simulation target network;

[0007] The network simulation entities are presented in a hierarchical manner, displaying the simulated target network and the network simulation entities.

[0008] Preferably, the network entity model is represented as follows: in Identifiers representing network entity models, This represents the network entity model. In the configuration items, L1 represents the network entity model. The number of configuration items in;

[0009] The network entity model It can further include different categories of configuration item groups, namely: This includes the first configuration item group. The number of configuration items in the first configuration item group is L 11 One, L 11 ≥1; This indicates the second configuration item group, which contains L configuration items.12 One, L 12 ≥1; This represents the Mth configuration item group, where M ≥ 1, and the number of configuration items in it is L. 1M One, L 1M ≥1.

[0010] Preferably, the first configuration item group Configure physical characteristics groups, and the corresponding configuration items include geographical location parameters, communication type parameters, computing performance parameters, and data storage parameters of the network entity model;

[0011] The second configuration item group Configure the logical characteristics group, and the corresponding configuration items include the computer software system parameters, database management system parameters, industrial software system parameters, embedded software system parameters, mobile terminal software system parameters, and communication protocol parameters of the network entity model;

[0012] Third configuration item group Configure user characteristics groups, and the corresponding configuration items include user level, user account, and user password.

[0013] Preferably, the network relationship model is represented as follows: in Identifiers representing network relationship models. This represents a network relationship model. In the configuration options, L2 represents the network relationship model. The number of configuration items in the network relationship model; For network entity model Network relationships are established between the corresponding network simulation entities.

[0014] Preferred network simulation entities The corresponding network entity model A simulation entity is generated after assigning values ​​to the configuration items in the configuration file, where 'x' represents the identification number of the network simulation entity. Identifiers representing network entity models, This represents the network entity model. In the configuration items, L1 represents the network entity model. The number of configuration items in;

[0015] Network Relationship Entities The corresponding model is the network relationship model. A relation entity is generated after assigning values ​​to the configuration items in the configuration file, where y represents the identification number of the network relation entity. Identifiers representing network relationship models. This represents a network relationship model. In the configuration options, L2 represents the network relationship model. The number of configuration items in the configuration; determining the network relationships between the network simulation entities through the network relationship entity;

[0016] The configuration items All include static configuration items and / or dynamic configuration items, wherein the dynamic configuration items receive the simulation parameters and dynamically adjust them.

[0017] Preferably, the location of each network simulation entity is displayed on a three-dimensional GIS map according to the geographical location parameters of the network simulation entities, and the network interconnection relationship between them is displayed according to the communication type parameters of the network simulation entities.

[0018] Preferably, the simulated target network is displayed at the physical layer, where multiple simulated target networks are displayed simultaneously, including the network simulation entities and the network interconnections between them.

[0019] Preferably, the physical layer display of the simulated target network also includes selecting the network simulation entities and network interconnection lines in the simulated target network, further presenting the network feature information, network management information contained therein, and performing network architecture analysis.

[0020] Preferably, the simulated target network is displayed at the logical layer, and the network simulation entities in the physical layer are displayed as corresponding logical objects on the logical layer, including operating systems, databases, or communication interconnection protocols.

[0021] Preferably, the simulated target network is displayed at the application layer, and the logical objects displayed at the logical layer correspond to the application objects displayed at the application layer, including user accounts, user passwords, or user permissions.

[0022] The beneficial effects of this invention are as follows: This invention discloses a method for constructing and hierarchically displaying network space simulations, including editing and setting various types of network entity models and network relationship models, storing the network entity models and network relationship models in a database; outputting the network entity models and network relationship models from the database to construct corresponding network simulation entities and simulation target networks; and displaying the simulation target networks and network simulation entities hierarchically. This method can effectively realize the simulation construction of network space, and can display the overall network architecture and the details of network components, which is conducive to intuitive network analysis and feature presentation. Attached Figure Description

[0023] Figure 1 This is a flowchart of an embodiment of a modeling and simulation layering method for cyberspace;

[0024] Figure 2This is a schematic diagram of an embodiment of a modeling and simulation system for cyberspace;

[0025] Figure 3 This is a flowchart of an embodiment of a conversion method for multi-type simulation target networks;

[0026] Figure 4 This is a schematic diagram of the display of network simulation entities in a three-dimensional GIS map according to an embodiment of the network space simulation construction and hierarchical display method of the present invention;

[0027] Figure 5 This is a flowchart of an embodiment of the network space simulation construction and hierarchical display method according to the present invention;

[0028] Figure 6 This is a schematic diagram of a three-layer display of a simulated target network in another embodiment of the network space simulation construction and layered display method according to the present invention;

[0029] Figure 7 This is a schematic diagram illustrating the maintenance features of logical objects by the logical layer in another embodiment of the network space simulation construction and layered display method according to the present invention. Detailed Implementation

[0030] To facilitate understanding of the present invention, a more detailed description is provided below with reference to the accompanying drawings and specific embodiments. Preferred embodiments of the invention are shown in the drawings. However, the invention can be implemented in many different forms and is not limited to the embodiments described herein. Rather, these embodiments are provided to provide a thorough and complete understanding of the disclosure of the invention.

[0031] It should be noted that, unless otherwise defined, all technical and scientific terms used in this specification have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the invention. The term "and / or" as used in this specification includes any and all combinations of one or more of the associated listed items.

[0032] Figure 1 A flowchart illustrating one embodiment of a layered method for modeling and simulating cyberspace is shown. Figure 1 The example includes a modeling method for cyberspace:

[0033] Step S11: Construct a simulation model, set up a network space model construction platform, edit and set up various types of network entity models on the network space model construction platform, and store the network entity models in the database;

[0034] Step S12: Simulation model output. The network space model building platform receives the network entity model requirement information from the network simulation application system, outputs the network entity model from the database and sends it to the network simulation application system for the network simulation application system to build the corresponding network simulation entity and simulation target network.

[0035] Step S13: Simulation parameter output. The network space model construction platform also outputs simulation parameters to the network simulation application system for simulation analysis and simulation deduction.

[0036] Preferred, in Figure 1 It also includes embodiments of cyberspace simulation methods:

[0037] Step S21: Generating simulation requirements, the network simulation application system sends the network entity model requirement information to the network space model building platform;

[0038] Step S22: Plan the simulation target network. The network simulation application system receives the network entity model from the network space model construction platform, assigns values ​​to the configuration items of the network entity model to obtain the network simulation entity, and then connects the network simulation entity to construct one or more simulation target networks.

[0039] Step S23: Network analysis and simulation. The characteristics of the simulation target network are visualized and presented. Simulation parameters are received from the network space model construction platform, and network simulation is performed using the simulation target network.

[0040] As can be seen, the above steps illustrate the methods and steps from the perspectives of both the cyberspace model construction platform and the network simulation application system. Combined with... Figure 2 Based on the same concept, the present invention also provides a network space modeling and simulation system, which includes a network space model building platform 1 and a network simulation application system 2, which are interconnected via a network. The same network space model building platform 1 can provide network model services to multiple network simulation application systems 2. Preferably, the network space model building platform 1 typically has high computer performance and large data storage space. It is interconnected with multiple simulation application systems 2 via a network 3. The simulation application system 2 can access the network space model building platform 1, select the required network entity model and / or network relationship model, and then perform the planning and simulation target network corresponding to step S22 on the simulation application system 2.

[0041] In practical applications, the cyberspace model building platform 1 can be a data computing service platform built by a dedicated data computing service provider. On the one hand, it provides simulation modeling services according to user needs, and on the other hand, it provides simulation data support for users' simulation operations. The simulation application system 2 mainly targets various data application needs with simulation application requirements, such as educational institutions, network security monitoring, and various enterprises and institutions.

[0042] This invention separates modeling and simulation, which allows modeling service providers to focus their services on model building, while users mainly focus on specific application-level needs and application problems. This simplifies the modeling cost for users, and at the same time, modeling service providers can formulate unified technical standards, which is conducive to achieving compatibility between different users and to forming a wider range of simulation applications among users.

[0043] The following is about Figure 1 The above steps, and Figure 2 The network space model building platform and network simulation application system will be further explained.

[0044] In step S11, the first step is to construct and set up the network entity model. Preferably, the network entity model is classified into categories, and different categories of network entity models have corresponding configuration items.

[0045] Preferably, the network entity model can be defined for multiple entities, including entity models of specific network devices, such as switch, router, and server devices; it also includes a network entity such as a local area network, which further includes multiple network devices; it also includes a distributed private cloud entity; or it can be an integrated entity containing multiple network devices, which can represent a communication hub, computing center, storage center, network switching center, or an entity work unit, such as a school, hospital, factory, or oil depot.

[0046] Preferably, the network entity model is represented as follows: in Identifiers representing network entity models, This represents the network entity model. In the configuration items, L1 represents the network entity model. The number of configuration items in the configuration.

[0047] Preferred network entity model Configuration items Configuration items can be static, meaning their values ​​remain unchanged over time, or dynamic, meaning their values ​​can be dynamically adjusted over time. Dynamic configuration items can be modified through simulation parameters, thereby enabling automatic simulation.

[0048] Preferably, for network entity models It can further include different categories of configuration item groups, namely: This includes the first configuration item group. The number of configuration items in this first configuration item group is L. 11 One, L 11 ≥1, This indicates the second configuration item group, which contains L configuration items. 12 One, L 12 ≥1, This represents the Mth configuration item group, where M ≥ 1, and the number of configuration items in it is L. 1M One, L 1M ≥1.

[0049] Preferably, the first configuration item group For the physical characteristics configuration group, the corresponding configuration items include the geographical location parameters of the network entity model (such as latitude and longitude, street address, building floor number, etc.), communication type parameters (such as communication method, which may include local area network cable, fiber optic communication line, mobile data communication, satellite data communication, etc., communication information rate, communication bandwidth, anti-interference characteristics, etc., and communication objects, thereby determining the simulation entities that need to be interconnected), computing performance parameters (such as memory size, CPU processing speed, number of CPUs, cloud computing type), and data storage parameters (such as storage space size, storage access method and speed, database type).

[0050] Preferably, the second configuration item group For logical characteristic configuration groups, the corresponding configuration items include computer software system parameters of the network entity model (such as Windows system and version, LINUX system and version, UNIX system and version, MACOS system and version), database management system (such as ORACLE database and version, SQL database and version, SERVER database and version), industrial software system parameters, embedded software system parameters (such as ARM system, 51 microcontroller system), mobile terminal software system parameters (such as Android system, iOS system), and communication protocol parameters (such as IP protocol, UDP protocol).

[0051] Preferably, a third configuration item group is also included. Configure user characteristics groups, and the corresponding configuration items include user level, user account, user password, etc.

[0052] Preferably, step S11 of constructing the simulation model also includes establishing a network relationship model. in Identifiers representing network relationship models. This represents a network relationship model. In the configuration options, L2 represents the network relationship model. The number of configuration items in the model. (Based on the network relationship model) It can be a network entity model The corresponding network simulation entities establish network relationship connections, therefore the network relationship model The corresponding configuration items include network entity objects, communication direction between network entity objects, communication channels, communication bandwidth, and other configuration items.

[0053] Preferred network relationship model Configuration items It can be a static configuration item, meaning that the configuration value of the configuration item remains unchanged over time, or it can be a dynamic configuration item, meaning that the configuration value of the configuration item can be dynamically adjusted over time.

[0054] Preferably, for step S22, planning the target network for simulation, it involves constructing network simulation entities in the network system based on the network entity model and network relationship model, according to the composition of the network system to be simulated, and determining the network connection relationships between these network simulation entities.

[0055] Preferred network simulation entities The corresponding network entity model The simulation entity is generated by assigning values ​​to the configuration items in the configuration file, where x represents the identification number of the network simulation entity.

[0056] Preferably, for any network simulation entity The communication type parameters are used to determine the communication interconnection relationship with other network simulation entities, thereby enabling the interconnection of multiple different network simulation entities in a simulated network.

[0057] Preferably, for any network simulation entity The configuration items can be empty. For empty configuration items, the corresponding value is 0 or a specific encoded value, such as in a network simulation entity. The second configuration item a1 2 It is empty and is represented by a value of 0 or a specific encoding value such as a binary code of all "1"s or a "1010..." interval code.

[0058] Preferably, for network entity models The number of configuration items L1 in the model can be considered the maximum value. In practical applications, a lower limit L can be defined for the number of configuration items in the model. 1min In practical applications, for a network simulation entity... The corresponding configuration items fall within the range of the minimum configuration combination. and maximum configuration combination Therefore, preferably, we will use the network entity model. The configuration items that must be present in the system are defined within the parameter range corresponding to the lower limit value of 1 minute, that is... The first 1 minute of configuration items are mandatory. The front of the middle These configuration items are mandatory, and for The middle and the back These configuration items are optional and not mandatory.

[0059] Similarly, for network relationship models The number of configuration items L2 in the model can be considered the maximum value. In practical applications, a lower limit L can be defined for the number of configuration items in the model. 2min In practical applications, what is a network relation entity? The corresponding configuration items fall within the range of the minimum configuration combination. and maximum configuration combination Therefore, preferably, we will use a network relationship model. The configuration items that must be present in the system are defined within the parameter range corresponding to the lower limit value of 2min, that is... The first 2 minutes of configuration items are mandatory. The front of the middle These configuration items are mandatory, and for The middle and the back These configuration items are optional and not mandatory.

[0060] The number of the above configuration items has both a maximum value setting, which determines the maximum number of parameter types that can be accommodated, and a minimum value setting, which determines the minimum number of indispensable parameter types. This is a rigid constraint. The number of configuration items in between retains a certain degree of flexibility, which enhances the flexibility of defining and using this network entity model and network relationship model. Therefore, it also has better compatibility and can adapt to the matching and conversion between different types of simulation models.

[0061] Preferably, for network entity models Each configuration item in the list, along with its serial number, determines its meaning and corresponding data type. Therefore, by querying the serial number of a configuration item, one can determine its meaning and data type.

[0062] Preferably, for network entity models that include multiple categories of configuration item groups. Each configuration item in each configuration item group also has a lower limit value, namely: in Indicates the first configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 11min One, L 11min ≤L 11 ; Indicates the second configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 12min One, L 12min ≤L 12 ; Indicates the second configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 1Mmin One, L 1Mmin ≤L 1M .

[0063] Preferably, assigning values ​​to the configuration items of the network entity model yields the network simulation entity. The method can be either to randomly generate values ​​using a computer or to manually edit the network entity model. The configuration items can be manually assigned values, or they can be automatically generated by importing parameter data tables from a computer.

[0064] Based on the same concept, a conversion method for multiple types of simulation target networks is also provided, such as... Figure 3 As shown, the steps include:

[0065] Step S31: Construct a network simulation model, edit and set various types of network entity models, and store the network entity models in the database;

[0066] Step S32: Heterogeneous entity conversion: Receive different types of simulation target networks, compare the configuration items of the network simulation heterogeneous entities in the simulation target networks with those of the network entity model, reconfigure the parameter items of the simulation heterogeneous entities, and convert them into network simulation entities corresponding to the network entity model.

[0067] Preferably, the network simulation heterogeneity is represented as in Identifiers representing heterogeneous network simulations. This indicates a heterogeneous network simulation. In the parameter terms, L3 represents the network simulation heterogeneity. The number of parameter items in;

[0068] In step S32, the method for comparing the configuration items of the network simulation heterogeneity with those of the network entity model and reconfiguring the parameter items of the simulation heterogeneity includes: [The text abruptly ends here, likely due to an incomplete sentence or a formatting error.] Extract and identify each parameter item in the network entity model to determine its relationship with the network entity model. The parameter items contained in the configuration items are the same; then select the network simulation heterogeneity. The parameter items that are the same as the configuration items are based on the network entity model. The order of the corresponding configuration items is rearranged and combined to generate a network simulation entity corresponding to the network entity model.

[0069] Preferably, the network simulation entity generated from the network simulation heterogeneity has configuration items ranging from the minimum configuration combination. and maximum configuration combination Between, L 1min This indicates the lower limit of the number of configuration items.

[0070] Preferably, in network simulation heterogeneous systems To network simulated entities During the conversion, it is necessary to ensure that the range of the corresponding parameter items after conversion is at least the minimum configuration combination. When the converted configuration item is less than When, then the network simulation heterogeneity It cannot be converted for simulation use.

[0071] Preferably, in step S31 of constructing the network simulation model, a network relationship model is also established. in Identifiers representing network relationship models. This represents a network relationship model. In the configuration options, L2 represents the network relationship model. The number of configuration items in the model; and the network relationship model. The corresponding network relation entity is It is a network relationship model The network relation model is a relation entity obtained by assigning values ​​to the configuration items, where y represents the identification number of the network relation entity. For the network entity model Corresponding network simulation entities Establish network relationships between them;

[0072] Preferably, after obtaining the network simulation entities, the network relationships between these entities can be determined through network relationship entities based on the network connectivity relationships between them. For example, a network relationship entity... Among them, parameter b1 1 Corresponding network simulation entities Parameter item b1 2 Corresponding network simulation entities Parameter item b1 3 Corresponding network simulation entities and The communication parameters between the two network simulation entities include whether the communication direction is unidirectional or bidirectional. If it is unidirectional, it should be indicated that the communication direction is driven by the network simulation entity. arrive Or is it a network-simulated entity? arrive For two-way communication, you can further add configuration item b1. 4 Limited to network simulation entities arrive The directional communication bandwidth or communication rate, and the network simulation entity arrive The communication bandwidth or communication rate in a given direction.

[0073] Therefore, by using network relation entities Afterwards, it can better simulate entities in the network. Services, thus simulating entities on the network The parameter items do not need to define the network communication interconnection relationship with other network simulation entities; instead, they are defined through network relationship entities. This is used to represent the network connection relationships between these network simulation entities separately.

[0074] Preferably, the heterogeneity conversion step further includes converting the network relation heterogeneities in the simulated target network into corresponding network relation entities; the network relation heterogeneities are represented as... in Identifiers representing heterogeneous network relationships. This indicates a heterogeneous network relationship. In the parameter terms, L4 represents the network relation heterogeneity. The number of parameter items in the file.

[0075] Preferably, the method for converting the network relation heterogeneous entities into corresponding network relation entities includes: converting the network relation heterogeneous entities into network relation entities. The various parameter items in the model are extracted and identified to obtain the network relationship model. The parameter items contained in the configuration items are the same; then select the network relationship heterogeneity. The parameter items that are the same as the configuration items are arranged according to the network relationship model. The order of the corresponding configuration items is rearranged and combined to generate network relationship entities corresponding to the network relationship model.

[0076] Preferably, in network relation heterogeneities To network relation entities During the transformation, it is necessary to ensure that the range of the corresponding parameter items after transformation is at least the minimum configuration combination of network relation entities. When the converted configuration item is less than When, then the network relation heterogeneity It cannot be converted for simulation use.

[0077] Preferably, different types of simulated target networks are received in batches. These simulated target networks include network simulation heterogeneities and / or network relationship heterogeneities. The network simulation heterogeneities and / or network relationship heterogeneities are then batch-converted into corresponding network simulation entities and / or network relationship entities. Finally, the batch-converted network simulation entities and / or network relationship entities are combined into a converted simulated target network, achieving overall batch conversion of different types of simulated target networks. The conversion method is as described above, only performed in batches.

[0078] Preferably, the characteristics of the transformed simulation target network are visualized and analyzed, including hierarchical display based on the configuration items of network simulation entities and / or network relationship entities in the simulation target network. Further references are available. Figures 4-6 The analysis shows the implementation examples.

[0079] Furthermore, based on Figure 2 The simulation system shown, preferably, constructs network simulation entities on network simulation application system 2. By selecting the required network entity model from the network space model construction platform, and then assigning values ​​to the network entity model, the required network simulation entity is obtained. The network simulation entity is then locally encapsulated and stored on network simulation application system 2. This saves hardware storage resources of the network simulation application system. Furthermore, this simulation system architecture allows the network space model construction platform to be shared by multiple network simulation application systems, making it suitable for distributed use under network conditions.

[0080] Preferably, after the network simulation application system completes the construction of the simulation target network, it can also send the various network simulation entities and / or network relationship entities included in the simulation target network back to the network space model construction platform in the form of tabular data. After receiving this tabular data, the network space model construction platform can restore and reproduce the simulation target network on the server. Thus, the simulation target network can also be designated and shared with the second network simulation application system. The second network simulation application system can analyze and evaluate the performance of the simulation target network, and can also simulate attacks on the simulation target network. The data of these simulated attacks can be sent back to the network simulation application system that built the simulation target network through the network space model construction platform. Thus, network attack and defense simulation exercises can be carried out in the two network simulation application systems. The network space model construction platform evaluates and reviews the attack and defense of both sides by monitoring the data flow of both sides.

[0081] Preferably, the network simulation application system can also import different types of simulation target networks in batches. These different types of simulation target networks are usually composed of network simulation heterogeneities and / or network relationship heterogeneities. That is to say, the network simulation entities and network relationship entities defined and used by the network simulation application system are not completely the same. In this case, the network simulation application system transmits the data of different types of simulation target networks as a whole to the network space model building platform. The network space model building platform transforms these network simulation heterogeneities and / or network relationship heterogeneities, including the aforementioned extraction and identification parameters, rearrangement and combination, and minimum configuration item requirements, converting them into corresponding network simulation entities and / or network relationship entities. Then, the transformed network simulation entities and / or network relationship entities are combined into simulation target networks and sent back to the network simulation application system. This realizes the overall batch conversion of different types of simulation target networks, greatly enhancing the application of different types of simulation target networks on this simulation system.

[0082] Preferably, in step S23, the visualization analysis and presentation of the characteristics of the simulated target network includes hierarchical display based on the parameter types of the network simulation entities in the simulated target network, combined with... Figure 5 Specifically, it includes physical layer visualization, logic layer visualization, and application layer visualization.

[0083] Preferred, in Figure 4 In this system, the location of each network simulation entity and its interconnection with each other are displayed on a 3D GIS map based on the geographical location parameters of the network simulation entities. Figure 4This shows that multiple network simulation entities P11 are located in different geographical locations, reflecting the spatial distribution of these network simulation entities. Furthermore, the network interconnection relationships between these network simulation entities P11 are visually presented through network interconnection lines R11. These network interconnection relationships are set through the communication type parameters of the aforementioned network simulation entities, or network interconnection lines can be constructed between different network simulation entities through the aforementioned network relationship entities.

[0084] Figure 4 While this display reflects the spatial distribution characteristics of the simulated target network, it cannot fully present the logical architecture of the simulated target network. Specifically, when the map scale is large, it cannot show the complete picture of each network simulation entity; conversely, when the map scale is small, it cannot show the spatial distribution details and network topology of each network simulation entity. Therefore, in applications, it is desirable to further display and analyze the network connection relationships of the simulated target network, as well as the network connection relationships of multiple simulated target networks, and further display the logical and application layer composition of the network simulation entities within the simulated target network.

[0085] Based on the same concept, and building upon the aforementioned content, a method for constructing and displaying network space simulations in a layered manner is also provided, such as... Figure 5 The process includes the following steps:

[0086] S101: Construct a network entity model, edit and set various types of network entity models and network relationship models, and store the network entity models and network relationship models in the database;

[0087] S102: Construct network simulation entities, output the network entity model and network relationship model from the database, and construct the corresponding network simulation entities and simulation target network;

[0088] S103: Network simulation entity presentation, which displays the simulation target network and network simulation entities in a hierarchical manner.

[0089] for Figure 5 In the illustrated embodiment, the construction of the network entity model and the construction of the network simulation entity do not need to be implemented separately as described above in the network space model construction platform and network simulation application system. Instead, they can be integrated into a single development environment, forming a system for both model construction and simulation application, suitable for application scenarios that integrate modeling and application. The specific methods for model construction and simulation construction can be implemented in conjunction with the aforementioned content.

[0090] Preferred, such as Figure 6As shown, the simulated target network is displayed in three layers: the physical layer, the logic layer, and the application layer. At the physical layer, multiple simulated target networks can be displayed simultaneously, such as... Figure 6 There are three simulation target networks: M1, M2, and M3. These three simulation target networks consist of network simulation entities and their interconnections. For example, the M3 simulation target network includes network simulation entity P11 and network interconnection line R11. This is consistent with... Figure 4 The corresponding network simulation entity P11 and network interconnection line R11 are the same.

[0091] Furthermore, by displaying the physical layer on the screen, the network simulation entity P11 and network interconnection line R11 in the simulated target network can be selected intuitively. The detailed network characteristic information contained therein can also be seen. Therefore, through this physical layer, the network architecture composition relationship of multiple simulated target networks and detailed network characteristic information can be queried intuitively, macro-level network management information can be obtained, and network architecture analysis can be performed.

[0092] Furthermore, as explained above, network simulation entities are not limited to specific network devices; they can also be local area networks, communication hubs, computing centers, storage centers, network switching centers, or even a physical work unit such as a school, hospital, factory, or oil depot. Therefore, network simulation entities have multiple types and layers. For example, if a network simulation entity is merely a network router, its characteristics primarily fall under the physical layer. However, when a network simulation entity corresponds to a server, it not only possesses physical layer network characteristics but also a logical layer corresponding to the operating system and an application layer corresponding to the users. Therefore, the network simulation entity can be further displayed and analyzed through the logical and application layers. Similarly, when a network simulation entity corresponds to a unit, such as a factory, it can represent an internal local area network within that factory, resulting in multiple operating systems on multiple computers and multiple users distributed across different computer systems.

[0093] Preferred, Figure 6 Display physical layer and Figure 4 The advantage of the former method, which displays three-dimensional geospatial data, lies in its ability to intuitively present the macroscopic architecture of the network and simultaneously display multiple simulated target networks on the same physical layer. The former method is also advantageous because it directly correlates with geographical location, directly representing the spatial distribution of simulated entities in the physical layer onto the geographic system. This allows for a more realistic understanding of their actual spatial distribution characteristics, resulting in a more lifelike perception of the spatial connectivity of lines. For example, if two locations cross a river, the communication link is typically wireless rather than wired. Figure 6 It's not something that can be directly observed. Furthermore, wireless and wired transmission methods differ, and for both sides engaging in offensive and defensive maneuvers in cyberspace, their offensive and defensive tactics must adapt to these differences in communication transmission methods.

[0094] Combination Figure 6 As can be seen, in the simulated target network M1, there is a network simulation entity MP11, which corresponds to two logical objects L1 and L2 in the logic layer. The network simulation entity MP11 and the two logical objects L1 and L2 in the logic layer are mapped and connected by lines. When the network simulation entity MP11 is selected, the mapping connection line will be highlighted, indicating the direct mapping relationship between the network simulation entity MP11 and the two logical objects L1 and L2 in the logic layer.

[0095] Therefore, by understanding the correspondence between the physical layer and the logical layer, the network characteristics of the network simulation entity in the physical layer at the logical layer can be clearly displayed. For example, if the network simulation entity MP11 is a network facility in a factory, this indicates that there are two logical layer objects in the factory network facility, such as two independent industrial operating systems, or databases, communication interconnection protocols, etc.

[0096] Similarly, in Figure 6 The simulation also shows that a network simulation entity in the target network M2 corresponds to a logical object L3 in the logical layer, and logical object L3 corresponds to an application object J1 in the application layer. For example, the network simulation entity is a switch, and the switch has a Windows-based computer operating system, which corresponds to logical object L3. On the computer operating system, there is a registered management user, which corresponds to application object J1. This user has user account, user password, and user permissions set.

[0097] Similarly, logical object L3 in the logic layer and application object J1 in the application layer are also mapped and connected by lines. When logical object L3 is selected, the mapping connection line will be highlighted, indicating the mapping relationship between logical object L3 and application object J1 in the application layer.

[0098] exist Figure 6 The diagram also shows that one network simulation entity in the simulated target network M3 corresponds to a logical object L4 in the logical layer, and another network simulation entity corresponds to a logical object L5 in the logical layer. At the same time, logical object L5 corresponds to two application objects J2 and J3 in the application layer. For specific examples, please refer to the above content, which will not be repeated here.

[0099] Furthermore, at the logical layer, each logical object can be further analyzed and its maintenance characteristics can be presented, including its patching characteristics, upgrade characteristics, and extension characteristics. For example, the various patches, upgrades, and extensions that a software operating system has undergone since its release. Figure 7 As shown, the maintenance features L101 of logical object L1 are visually represented using a star diagram, where each maintenance feature is distinguished by a corresponding code number. Similarly, for the application layer, each application object can further present its security features, including password length, password composition, and password quantity. This visual presentation facilitates targeted vulnerability discovery and the development of targeted network attack strategies.

[0100] pass Figure 6 and Figure 7 The layered display not only clearly presents the composition architecture of each simulated target network, but also further reveals the network technical characteristics of simulated entities at the logic and application layers, facilitating further feature analysis and network operation simulation at these layers. Therefore, this display method allows for both a direct, physical-level horizontal presentation and analysis of the simulated target network architecture, and a vertical presentation and analysis of the compositional characteristics of simulated entities at the logic and application layers. Furthermore, the logic and application layers can be further expanded upon within their respective layers. Thus, this presentation and analysis method forms a three-dimensional display architecture, enabling seamless integration of macroscopic and microscopic displays on a single interface, and possesses strong intuitiveness.

[0101] for Figure 1 In step S3 of the network analysis simulation, after the technical characteristics of the physical layer, logical layer and application layer are presented intuitively, a network attack plan can be planned for the simulated target network, including the specific targets to be attacked in each of the three layers, such as which communication link, which operating system vulnerability, which user, etc., as well as the attack strategy and timing.

[0102] Furthermore, network simulation and deduction using simulated target networks include: target network operation, target network attack, and target network defense.

[0103] The target network operation includes simulations of network information transmission, information system operation, and user login and usage between network simulation entities over time.

[0104] Targeted network attacks include: simulating physical circuit breaking, virus intrusion, and user account intrusion against network simulation entities at the physical, logical, and application layers over time.

[0105] Target network protection includes: over time, simulating network simulation entities at the physical, logical, and application layers through firewall blocking, virus scanning, and user account modification settings.

[0106] Therefore, this invention discloses a method for constructing and displaying network space simulations in a hierarchical manner. This method includes editing and setting various types of network entity models on a network space model construction platform. The network space model construction platform is interconnected with a network simulation application system, receiving requirement information from the network entity models in the network simulation application system. The corresponding network simulation entities and target networks are then constructed in the network simulation application system for simulation analysis and deduction. This method separates network space model construction from simulation applications while simultaneously integrating them closely. This approach facilitates the realization of data services and applications through new business models and reduces the difficulty of constructing simulation application systems for users, while also improving application efficiency.

[0107] The above description is merely an embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent structural transformations made based on the content of the present invention specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of the present invention.

Claims

1. A network space simulation construction and hierarchical display method, characterized in that, The method comprises the steps of: constructing network entity models, editing and setting various types of network entity models and network relationship models, and storing the network entity models and network relationship models into a database; constructing network simulation entities, outputting the network entity models and network relationship models from the database, and constructing corresponding network simulation entities and simulation target networks; network simulation entity presentation, hierarchical display of the simulation target networks and network simulation entities; The network entity model is represented as wherein denotes an identity of the network entity model, denotes a configuration item in the network entity model and L1 denotes a number of configuration items in the network entity model . The network entity model Further comprising different categories of configuration item groups, namely: Among them, the first configuration item group The number of configuration items in the first configuration item group is L 11 , L 11 ≥ 1; Indicates the second configuration item group, the number of configuration items in which is L 12 , L 12 ≥ 1; Indicates the Mth configuration item group, M ≥ 1, the number of configuration items in which is L 1M , L 1M ≥ 1; The network relationship model is represented as Wherein The identity of the network relationship model is represented as The configuration item in the network relationship model is represented as L2 represents the number of configuration items in the network relationship model The network relationship connection between the network simulation entities corresponding to the network entity model is constructed through the network relationship model The network relationship model is represented as The network relationship connection between the network simulation entities corresponding to the network entity model is constructed through the network relationship model network simulation entity corresponding to a configuration item in the network entity model , where x represents the identification number of the network simulation entity, represents the identification of the network entity model, represents a configuration item in the network entity model , and L1 represents the number of configuration items in the network entity model . network relationship entity corresponding is a network relationship model a relationship entity after assignment of configuration items in the network relationship model, wherein y represents an identification number of the network relationship entity, represents an identification of the network relationship model, represents a configuration item in the network relationship model , and L2 represents a quantity of configuration items in the network relationship model ; and the network relationship between the network simulation entities is determined through the network relationship entity. The configuration item Both include static configuration items and / or dynamic configuration items, which receive simulation parameters for dynamic regulation. hierarchical display of the parameter types of the network simulation entities in the simulation target networks, including visual physical layer display, logical layer display, and application layer display. 2.The cyberspace simulation construction and hierarchical display method according to claim 1, characterized in that, The first configuration item group For the physical characteristic configuration group, the corresponding configuration item includes the geographical position parameter, the communication type parameter, the calculation performance parameter and the data storage parameter of the network entity model. The second configuration item group For the logical characteristic configuration group, the corresponding configuration item includes the computer software system parameter of network entity model, database management system, industrial software system parameter, embedded software system parameter, mobile terminal software system parameter and communication protocol parameter. The third configuration item group For the user characteristic configuration group, the corresponding configuration items include user level, user account, and user password. 3.The cyberspace simulation construction and hierarchical display method according to claim 1, characterized in that, displaying the locations of the network simulation entities in a three-dimensional GIS map according to the geographical location parameters of the network simulation entities, and displaying the network interconnection relationships between the network simulation entities according to the communication type parameters of the network simulation entities. 4.The method of claim 1, wherein, physical layer display of the simulation target networks, displaying multiple simulation target networks in the physical layer, including the network simulation entities and the network interconnection lines therebetween.

5. The cyberspace simulation construction and hierarchical display method according to claim 4, characterized in that, In the physical layer display of the simulation target networks, the network simulation entities and the network interconnection lines in the simulation target networks are selected, and further network feature information and network management information contained therein are presented, and network architecture analysis is performed.

6. The cyberspace simulation construction and hierarchical display method according to claim 5, characterized in that, logical layer display of the simulation target networks, displaying corresponding logical objects on the logical layer for the network simulation entities in the physical layer, including operating systems, databases, or communication interconnection protocols.

7. The cyberspace simulation construction and hierarchical display method according to claim 6, characterized in that, application layer display of the simulation target networks, displaying corresponding application objects on the application layer for the logical objects displayed on the logical layer, including user accounts, user passwords, or user permissions.

Images