A cyber space modeling and simulation system

Abstract

The application discloses a modeling and simulation system of network space. The modeling system comprises a modeling server and a modeling memory, the modeling server is used for editing and setting a plurality of types of network entity models, and the modeling memory is used for storing the network entity models; the simulation system comprises a simulation server, a plurality of types of network entity models are edited and set on the modeling server, the modeling server is network interconnected with the simulation server, demand information of the network entity models from the simulation server is received, corresponding network simulation entities and a simulation target network are constructed on the simulation server, and simulation analysis and simulation deduction are conducted. The modeling and simulation system separates the model construction of the network space from the simulation application, is closely combined, is beneficial to realizing data service and application in a new commercial mode, and is beneficial to reducing the construction difficulty of the user for the simulation application of the network space and improving application efficiency.

Description

Technical Field

[0001] This invention relates to the field of computer simulation technology, and in particular to a modeling and simulation system for cyberspace. Background Technology

[0002] In current technologies, the demand for modeling and simulation analysis of cyberspace is increasing. However, development units mainly build simulation objects based on their own models, and the diverse types of network models severely restrict the rapid construction of modeling and simulation and their compatibility. Therefore, it is necessary to provide new business models or working modes to promote the widespread application of cyberspace modeling and simulation. Summary of the Invention

[0003] The main technical problem solved by this invention is to provide a modeling and simulation system for cyberspace, which solves the problems of incompatibility between various cyberspace models, long simulation construction and development cycles, and unintuitive presentation of target network analysis in the prior art.

[0004] To address the aforementioned technical problems, one technical solution adopted by this invention is to provide a cyberspace modeling system, including a modeling server and a modeling memory. The modeling server is used to edit and set various types of network entity models, and the modeling memory is used to store the network entity models. The modeling server also receives network entity model requirement information from a simulation system, outputs the network entity models from the modeling memory, and sends them to the simulation system for the simulation system to construct corresponding network simulation entities and simulation target networks. The modeling server also outputs simulation parameters to the simulation system for the simulation system to perform simulation analysis and simulation deduction.

[0005] Preferably, the network entity model is represented as follows: in Identifiers representing network entity models, This represents the network entity model. In the configuration items, L1 represents the network entity model. The number of configuration items in the configuration.

[0006] Preferably, the network entity model It can further include different categories of configuration item groups, namely: This includes the first configuration item group. The number of configuration items in the first configuration item group is L 11 One, L 11 ≥1; This indicates the second configuration item group, which contains L configuration items. 12 One, L 12 ≥1; This represents the Mth configuration item group, where M ≥ 1, and the number of configuration items in it is L. 1M One, L 1M ≥1.

[0007] Preferably, the modeling server is also used to establish a network relationship model. in Identifiers representing network relationship models. This represents a network relationship model. In the configuration options, L2 represents the network relationship model. The number of configuration items in the network relationship model; For network entity model Network relationships are established between the corresponding network simulation entities.

[0008] Based on the same concept, the present invention also provides a cyberspace simulation system, including a simulation server. The simulation server sends requirement information for network entity models to a cyberspace modeling system, receives network entity models from the modeling system, assigns values ​​to configuration items of the network entity models to obtain network simulation entities, and then connects the network simulation entities to construct one or more target networks. The simulation server also performs visualization analysis and presentation of the characteristics of the target networks, receives simulation parameters from the modeling system, and uses the target networks to perform network simulation deduction.

[0009] Preferred network simulation entities The corresponding network entity model The simulation entity is generated by assigning values ​​to the configuration items in the configuration file, where x represents the identification number of the network simulation entity.

[0010] Preferably, for network entity models that include multiple categories of configuration item groups. Each configuration item in each configuration item group also has a lower limit value, namely: in Indicates the first configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 11min One, L 11min ≤L 11 ; Indicates the second configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 12min One, L 12min ≤L 12 ; Indicates the second configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 1Mmin One, L 1Mmin ≤L1M .

[0011] Preferably, a network simulation entity is obtained. The method also includes receiving network simulation heterogeneities from different systems. Extraction and recombination were performed, among which Identifiers representing heterogeneous network simulations. This indicates a heterogeneous network simulation. In the configuration value, L3 represents the network simulation heterogeneity. The number of parameters in the file.

[0012] Preferably, in network analysis and simulation, the characteristics of the target network are visualized and presented, including hierarchical display based on the configuration item group type of the network simulation entities in the target network.

[0013] Preferably, the target network is displayed in three layers: physical layer, logical layer, and application layer. The physical layer displays network simulation entities in the target network, the physical layer displays the logical objects corresponding to the network simulation entities, and the application layer displays the application objects corresponding to the logical objects.

[0014] The beneficial effects of this invention are as follows: This invention discloses a network space modeling and simulation system. The modeling system includes a modeling server and a modeling storage unit. The modeling server is used to edit and set up various types of network entity models, and the modeling storage unit is used to store the network entity models. The simulation system includes a simulation server, on which various types of network entity models are edited and set up. The modeling server and the simulation server are interconnected via a network. The modeling server receives requirement information from the network entity models from the simulation server, constructs corresponding network simulation entities and simulation target networks on the simulation server, and performs simulation analysis and simulation deduction. This modeling and simulation system separates network space model construction from simulation applications while closely integrating them. This facilitates the realization of data services and applications through new business models and reduces the difficulty for users in constructing network space simulation applications, while also improving application efficiency. Attached Figure Description

[0015] Figure 1 This is a flowchart of an embodiment of a modeling and simulation analysis method for cyberspace;

[0016] Figure 2 This is a schematic diagram of an embodiment of the cyberspace modeling and simulation system according to the present invention;

[0017] Figure 3 This is a flowchart of an embodiment of a conversion method for multi-type simulation target networks;

[0018] Figure 4This is a schematic diagram showing the network simulation entity in a three-dimensional GIS map according to another embodiment of the network space modeling and simulation system of the present invention;

[0019] Figure 5 This is a flowchart of an embodiment of a method for constructing, analyzing, and displaying network space simulations;

[0020] Figure 6 This is a schematic diagram of a three-layer display of a target network in another embodiment of the network space modeling and simulation system according to the present invention;

[0021] Figure 7 This is a schematic diagram illustrating the maintenance characteristics of logical objects by the logical layer in another embodiment of the network space modeling and simulation system according to the present invention. Detailed Implementation

[0022] To facilitate understanding of the present invention, a more detailed description is provided below with reference to the accompanying drawings and specific embodiments. Preferred embodiments of the invention are shown in the drawings. However, the invention can be implemented in many different forms and is not limited to the embodiments described herein. Rather, these embodiments are provided to provide a thorough and complete understanding of the disclosure of the invention.

[0023] It should be noted that, unless otherwise defined, all technical and scientific terms used in this specification have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the invention. The term "and / or" as used in this specification includes any and all combinations of one or more of the associated listed items.

[0024] Figure 1 A flowchart illustrating an embodiment of a modeling and simulation analysis method for cyberspace is shown. Figure 1 The example includes a modeling method for cyberspace:

[0025] Step S11: Construct a simulation model, set up a network space model construction platform, edit and set up various types of network entity models on the network space model construction platform, and store the network entity models in the database;

[0026] Step S12: Simulation model output. The network space model building platform receives the network entity model requirement information from the network simulation application system, outputs the network entity model from the database and sends it to the network simulation application system for the network simulation application system to build the corresponding network simulation entity and simulation target network.

[0027] Step S13: Simulation parameter output. The network space model construction platform also outputs simulation parameters to the network simulation application system for simulation analysis and simulation deduction.

[0028] Preferred, in Figure 1 It also includes embodiments of cyberspace simulation methods:

[0029] Step S21: Generating simulation requirements, the network simulation application system sends the network entity model requirement information to the network space model building platform;

[0030] Step S22: Plan the simulation target network. The network simulation application system receives the network entity model from the network space model construction platform, assigns values ​​to the configuration items of the network entity model to obtain the network simulation entity, and then connects the network simulation entity to construct one or more simulation target networks.

[0031] Step S23: Network analysis and simulation. The characteristics of the simulation target network are visualized and presented. Simulation parameters are received from the network space model construction platform, and network simulation is performed using the simulation target network.

[0032] As can be seen, the above steps illustrate the methods and steps from the perspectives of both the cyberspace model construction platform and the network simulation application system. Combined with... Figure 2 Based on the same concept, the present invention also provides a network space modeling and simulation system, which includes a network space model building platform 1 and a network simulation application system 2, which are interconnected via a network. The same network space model building platform 1 can provide network model services to multiple network simulation application systems 2. Preferably, the network space model building platform 1 typically has high computer performance and large data storage space. It is interconnected with multiple simulation application systems 2 via a network 3. The simulation application system 2 can access the network space model building platform 1, select the required network entity model and / or network relationship model, and then perform the planning and simulation target network corresponding to step S22 on the simulation application system 2.

[0033] In practical applications, the cyberspace model building platform 1 can be a data computing service platform built by a dedicated data computing service provider. On the one hand, it provides simulation modeling services according to user needs, and on the other hand, it provides simulation data support for users' simulation operations. The simulation application system 2 mainly targets various data application needs with simulation application requirements, such as educational institutions, network security monitoring, and various enterprises and institutions.

[0034] This invention separates modeling and simulation, which allows modeling service providers to focus their services on model building, while users mainly focus on specific application-level needs and application problems. This simplifies the modeling cost for users, and at the same time, modeling service providers can formulate unified technical standards, which is conducive to achieving compatibility between different users and to forming a wider range of simulation applications among users.

[0035] The following is about Figure 1 The above steps, and Figure 2 The network space model building platform and network simulation application system will be further explained.

[0036] In step S11, the first step is to construct and set up the network entity model. Preferably, the network entity model is classified into categories, and different categories of network entity models have corresponding configuration items.

[0037] Preferably, the network entity model can be defined for multiple entities, including entity models of specific network devices, such as switch, router, and server devices; it also includes a network entity such as a local area network, which further includes multiple network devices; it also includes a distributed private cloud entity; or it can be an integrated entity containing multiple network devices, which can represent a communication hub, computing center, storage center, network switching center, or an entity work unit, such as a school, hospital, factory, or oil depot.

[0038] Preferably, the network entity model is represented as follows: in Identifiers representing network entity models, This represents the network entity model. In the configuration items, L1 represents the network entity model. The number of configuration items in the configuration.

[0039] Preferred network entity model Configuration items Configuration items can be static, meaning their values ​​remain unchanged over time, or dynamic, meaning their values ​​can be dynamically adjusted over time. Dynamic configuration items can be modified through simulation parameters, thereby enabling automatic simulation.

[0040] Preferably, for network entity models It can further include different categories of configuration item groups, namely: This includes the first configuration item group. The number of configuration items in this first configuration item group is L. 11 One, L11 ≥1, This indicates the second configuration item group, which contains L configuration items. 12 One, L 12 ≥1, This represents the Mth configuration item group, where M ≥ 1, and the number of configuration items in it is L. 1M One, L 1M ≥1.

[0041] Preferably, the first configuration item group For the physical characteristics configuration group, the corresponding configuration items include the geographical location parameters of the network entity model (such as latitude and longitude, street address, building floor number, etc.), communication type parameters (such as communication method, which may include local area network cable, fiber optic communication line, mobile data communication, satellite data communication, etc., communication information rate, communication bandwidth, anti-interference characteristics, etc., and communication objects, thereby determining the simulation entities that need to be interconnected), computing performance parameters (such as memory size, CPU processing speed, number of CPUs, cloud computing type), and data storage parameters (such as storage space size, storage access method and speed, database type).

[0042] Preferably, the second configuration item group For logical characteristic configuration groups, the corresponding configuration items include computer software system parameters of the network entity model (such as Windows system and version, LINUX system and version, UNIX system and version, MACOS system and version), database management system (such as ORACLE database and version, SQL database and version, SERVER database and version), industrial software system parameters, embedded software system parameters (such as ARM system, 51 microcontroller system), mobile terminal software system parameters (such as Android system, iOS system), and communication protocol parameters (such as IP protocol, UDP protocol).

[0043] Preferably, a third configuration item group is also included. Configure user characteristics groups, and the corresponding configuration items include user level, user account, user password, etc.

[0044] Preferably, step S11 of constructing the simulation model also includes establishing a network relationship model. in Identifiers representing network relationship models. This represents a network relationship model. In the configuration options, L2 represents the network relationship model. The number of configuration items in the model. (Based on the network relationship model) It can be a network entity model The corresponding network simulation entities establish network relationship connections, therefore the network relationship model The corresponding configuration items include network entity objects, communication direction between network entity objects, communication channels, communication bandwidth, and other configuration items.

[0045] Preferred network relationship model Configuration items It can be a static configuration item, meaning that the configuration value of the configuration item remains unchanged over time, or it can be a dynamic configuration item, meaning that the configuration value of the configuration item can be dynamically adjusted over time.

[0046] Preferably, for step S22, planning the target network for simulation, it involves constructing network simulation entities in the network system based on the network entity model and network relationship model, according to the composition of the network system to be simulated, and determining the network connection relationships between these network simulation entities.

[0047] Preferred network simulation entities The corresponding network entity model The simulation entity is generated by assigning values ​​to the configuration items in the configuration file, where x represents the identification number of the network simulation entity.

[0048] Preferably, for any network simulation entity The communication type parameters are used to determine the communication interconnection relationship with other network simulation entities, thereby enabling the interconnection of multiple different network simulation entities in a simulated network.

[0049] Preferably, for any network simulation entity The configuration items can be empty. For empty configuration items, the corresponding value is 0 or a specific encoded value, such as in a network simulation entity. The second configuration item a1 2 It is empty and is represented by a value of 0 or a specific encoding value such as a binary code of all "1"s or a "1010..." interval code.

[0050] Preferably, for network entity models The number of configuration items L1 in the model can be considered as the maximum value. In practical applications, a lower limit L can be defined for the number of configuration items in the model. 1min In practical applications, for a network simulation entity... The corresponding configuration items fall within the range of the minimum configuration combination. and maximum configuration combination Therefore, preferably, we will use the network entity model. The configuration items that must be present in the system are defined within the parameter range corresponding to the lower limit value of 1 minute, that is... The first 1 minute of configuration items are the required configuration items, that is... The front of the middle These configuration items are mandatory, and for The middle and the back These configuration items are optional and not mandatory.

[0051] Similarly, for network relationship models The number of configuration items L2 in the model can be considered the maximum value. In practical applications, a lower limit L can be defined for the number of configuration items in the model. 2min In practical applications, what is a network relation entity? The corresponding configuration items fall within the range of the minimum configuration combination. and maximum configuration combination Therefore, preferably, we will use a network relationship model. The configuration items that must be present in the system are defined within the parameter range corresponding to the lower limit value of 2min, that is... The first 2 minutes of configuration items are mandatory. The front of the middle These configuration items are mandatory, and for The middle and the back These configuration items are optional and not mandatory.

[0052] The number of the above configuration items has both a maximum value setting, which determines the maximum number of parameter types that can be accommodated, and a minimum value setting, which determines the minimum number of indispensable parameter types. This is a rigid constraint. The number of configuration items in between retains a certain degree of flexibility, which enhances the flexibility of defining and using this network entity model and network relationship model. Therefore, it also has better compatibility and can adapt to the matching and conversion between different types of simulation models.

[0053] Preferably, for network entity models Each configuration item in the list, along with its serial number, determines its meaning and corresponding data type. Therefore, by querying the serial number of a configuration item, one can determine its meaning and data type.

[0054] Preferably, for network entity models that include multiple categories of configuration item groups. Each configuration item in each configuration item group also has a lower limit value, namely: in Indicates the first configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 11min One, L 11min ≤L11 ; Indicates the second configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 12min One, L 12min ≤L 12 ; Indicates the second configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 1Mmin One, L 1Mmin ≤L 1M .

[0055] Preferably, assigning values ​​to the configuration items of the network entity model yields the network simulation entity. The method can be either to randomly generate values ​​using a computer or to manually edit the network entity model. The configuration items can be manually assigned values, or they can be automatically generated by importing parameter data tables from a computer.

[0056] Based on the same concept, a conversion method for multiple types of simulation target networks is also provided, such as... Figure 3 As shown, the steps include:

[0057] Step S31: Construct a network simulation model, edit and set various types of network entity models, and store the network entity models in the database;

[0058] Step S32: Heterogeneous entity conversion: Receive different types of simulation target networks, compare the configuration items of the network simulation heterogeneous entities in the simulation target networks with those of the network entity model, reconfigure the parameter items of the simulation heterogeneous entities, and convert them into network simulation entities corresponding to the network entity model.

[0059] Preferably, the network simulation heterogeneity is represented as in Identifiers representing heterogeneous network simulations. This indicates a heterogeneous network simulation. In the parameter terms, L3 represents the network simulation heterogeneity. The number of parameter items in;

[0060] In step S32, the method for comparing the configuration items of the network simulation heterogeneity with those of the network entity model and reconfiguring the parameter items of the simulation heterogeneity includes: [The text abruptly ends here, likely due to an incomplete sentence or a formatting error.] Extract and identify each parameter item in the network entity model to determine its relationship with the network entity model. The parameter items contained in the configuration items are the same; then select the network simulation heterogeneity. The parameter items that are the same as the configuration items are based on the network entity model. The order of the corresponding configuration items is rearranged and combined to generate a network simulation entity corresponding to the network entity model.

[0061] Preferably, the network simulation entity generated from the network simulation heterogeneity has configuration items ranging from the minimum configuration combination. and maximum configuration combination Between, L 1min This indicates the lower limit of the number of configuration items.

[0062] Preferably, in network simulation heterogeneous systems To network simulated entities During the conversion, it is necessary to ensure that the range of the corresponding parameter items after conversion is at least the minimum configuration combination. When the converted configuration item is less than When, the network simulation heterogeneity It cannot be converted for simulation use.

[0063] Preferably, in step S31 of constructing the network simulation model, a network relationship model is also established. in Identifiers representing network relationship models. This represents a network relationship model. In the configuration options, L2 represents the network relationship model. The number of configuration items in the model; and the network relationship model. The corresponding network relation entity is It is a network relationship model The network relation model is a relation entity obtained by assigning values ​​to the configuration items, where y represents the identification number of the network relation entity. For the network entity model Corresponding network simulation entities Establish network relationships between them;

[0064] Preferably, after obtaining the network simulation entities, the network relationships between these entities can be determined through network relationship entities based on the network connectivity relationships between them. For example, a network relationship entity... Among them, parameter b1 1 Corresponding network simulation entities Parameter item b1 2 Corresponding network simulation entities Parameter item b1 3 Corresponding network simulation entities and The communication parameters between the two network simulation entities include whether the communication direction is unidirectional or bidirectional. If it is unidirectional, it should be indicated that the communication direction is driven by the network simulation entity. arrive Or is it a network-simulated entity? arrive For two-way communication, you can further add configuration item b1. 4 Limited to network simulation entities arrive The directional communication bandwidth or communication rate, and the network simulation entity arrive The communication bandwidth or communication rate in a given direction.

[0065] Therefore, by using network relation entities Afterwards, it can better simulate entities in the network. Services, thus simulating entities on the network The parameter items do not need to define the network communication interconnection relationship with other network simulation entities; instead, they are defined through network relationship entities. This is used to represent the network connection relationships between these network simulation entities separately.

[0066] Preferably, the heterogeneity conversion step further includes converting the network relation heterogeneities in the simulated target network into corresponding network relation entities; the network relation heterogeneities are represented as... in Identifiers representing heterogeneous network relationships. This indicates a heterogeneous network relationship. In the parameter terms, L4 represents the network relation heterogeneity. The number of parameter items in the file.

[0067] Preferably, the method for converting the network relation heterogeneous entities into corresponding network relation entities includes: converting the network relation heterogeneous entities into network relation entities. The various parameter items in the model are extracted and identified to obtain the network relationship model. The parameter items contained in the configuration items are the same; then select the network relationship heterogeneity. The parameter items that are the same as the configuration items are arranged according to the network relationship model. The order of the corresponding configuration items is rearranged and combined to generate network relationship entities corresponding to the network relationship model.

[0068] Preferably, in network relation heterogeneities To network relation entities During the transformation, it is necessary to ensure that the range of the corresponding parameter items after transformation is at least the minimum configuration combination of network relation entities. When the converted configuration item is less than When, then the network relation heterogeneity It cannot be converted for simulation use.

[0069] Preferably, different types of simulated target networks are received in batches. These simulated target networks include network simulation heterogeneities and / or network relationship heterogeneities. The network simulation heterogeneities and / or network relationship heterogeneities are then batch-converted into corresponding network simulation entities and / or network relationship entities. Finally, the batch-converted network simulation entities and / or network relationship entities are combined into a converted simulated target network, achieving overall batch conversion of different types of simulated target networks. The conversion method is as described above, only performed in batches.

[0070] Preferably, the characteristics of the transformed simulation target network are visualized and analyzed, including hierarchical display based on the configuration items of network simulation entities and / or network relationship entities in the simulation target network. Further references are available. Figures 4-6 The analysis shows the embodiments.

[0071] Furthermore, based on Figure 2 The simulation system shown, preferably, constructs network simulation entities on network simulation application system 2. By selecting the required network entity model from the network space model construction platform, and then assigning values ​​to the network entity model, the required network simulation entity is obtained. The network simulation entity is then locally encapsulated and stored on network simulation application system 2. This saves hardware storage resources of the network simulation application system. Furthermore, this simulation system architecture allows the network space model construction platform to be shared by multiple network simulation application systems, making it suitable for distributed use under network conditions.

[0072] Preferably, after the network simulation application system completes the construction of the simulation target network, it can also send the various network simulation entities and / or network relationship entities included in the simulation target network back to the network space model construction platform in the form of tabular data. After receiving this tabular data, the network space model construction platform can restore and reproduce the simulation target network on the server. Thus, the simulation target network can also be designated and shared with the second network simulation application system. The second network simulation application system can analyze and evaluate the performance of the simulation target network, and can also simulate attacks on the simulation target network. The data of these simulated attacks can be sent back to the network simulation application system that built the simulation target network through the network space model construction platform. Thus, network attack and defense simulation exercises can be carried out in the two network simulation application systems. The network space model construction platform evaluates and reviews the attack and defense of both sides by monitoring the data flow of both sides.

[0073] Preferably, the network simulation application system can also import different types of simulation target networks in batches. These different types of simulation target networks are usually composed of network simulation heterogeneities and / or network relationship heterogeneities. That is to say, the network simulation entities and network relationship entities defined and used by the network simulation application system are not completely the same. In this case, the network simulation application system transmits the data of different types of simulation target networks as a whole to the network space model building platform. The network space model building platform transforms these network simulation heterogeneities and / or network relationship heterogeneities, including the aforementioned extraction and identification parameters, rearrangement and combination, and minimum configuration item requirements, converting them into corresponding network simulation entities and / or network relationship entities. Then, the transformed network simulation entities and / or network relationship entities are combined into simulation target networks and sent back to the network simulation application system. This realizes the overall batch conversion of different types of simulation target networks, greatly enhancing the application of different types of simulation target networks on this simulation system.

[0074] Preferably, in step S23, the visualization analysis and presentation of the characteristics of the target network includes hierarchical display based on the parameter types of the network simulation entities in the target network, combined with... Figure 5 Specifically, it includes physical layer visualization, logic layer visualization, and application layer visualization.

[0075] Preferred, in Figure 4 In this system, the location of each network simulation entity and its interconnection with each other are displayed on a 3D GIS map based on the geographical location parameters of the network simulation entities. Figure 4 This shows that multiple network simulation entities P11 are located in different geographical locations, reflecting the spatial distribution of these network simulation entities. Furthermore, the network interconnection relationships between these network simulation entities P11 are visually presented through network interconnection lines R11. These network interconnection relationships are set through the communication type parameters of the aforementioned network simulation entities, or network interconnection lines can be constructed between different network simulation entities through the aforementioned network relationship entities.

[0076] Figure 4 While this display reflects the spatial distribution characteristics of the simulated target network, it cannot fully present the logical architecture of the simulated target network. Specifically, when the map scale is large, it cannot show the complete picture of each network simulation entity; conversely, when the map scale is small, it cannot show the spatial distribution details and network topology of each network simulation entity. Therefore, in applications, it is desirable to further display and analyze the network connection relationships of the simulated target network, as well as the network connection relationships of multiple simulated target networks, and further display the logical and application layer composition of the network simulation entities within the simulated target network.

[0077] Based on the same concept, and building upon the aforementioned content, a method for constructing, analyzing, and displaying cyberspace simulations is also provided, such as... Figure 5 The process includes the following steps:

[0078] S101: Construct a network entity model, edit and set various types of network entity models and network relationship models, and store the network entity models and network relationship models in the database;

[0079] S102: Construct network simulation entities, output the network entity model and network relationship model from the database, and construct the corresponding network simulation entities and simulation target network;

[0080] S103: Network simulation entity presentation, which displays the simulation target network and network simulation entities in a hierarchical manner.

[0081] for Figure 5 In the illustrated embodiment, the construction of the network entity model and the construction of the network simulation entity do not need to be implemented separately as described above in the network space model construction platform and network simulation application system. Instead, they can be integrated into a single development environment, forming a system for both model construction and simulation application, suitable for application scenarios that integrate modeling and application. The specific methods for model construction and simulation construction can be implemented in conjunction with the aforementioned content.

[0082] Preferred, such as Figure 6 As shown, the simulated target network is displayed in three layers: the physical layer, the logic layer, and the application layer. At the physical layer, multiple simulated target networks can be displayed simultaneously, such as... Figure 6 There are three simulation target networks: M1, M2, and M3. These three simulation target networks consist of network simulation entities and their interconnections. For example, the M3 simulation target network includes network simulation entity P11 and network interconnection line R11. This is consistent with... Figure 4 The corresponding network simulation entity P11 and network interconnection line R11 are the same.

[0083] Furthermore, by displaying the physical layer on the screen, the network simulation entity P11 and network interconnection line R11 in the simulated target network can be selected intuitively. The detailed network characteristic information contained therein can also be seen. Therefore, through this physical layer, the network architecture composition relationship of multiple simulated target networks and detailed network characteristic information can be queried intuitively, macro-level network management information can be obtained, and network architecture analysis can be performed.

[0084] Furthermore, as explained above, network simulation entities are not limited to specific network devices; they can also be local area networks, communication hubs, computing centers, storage centers, network switching centers, or even a physical work unit such as a school, hospital, factory, or oil depot. Therefore, network simulation entities have multiple types and layers. For example, if a network simulation entity is merely a network router, its characteristics primarily fall under the physical layer. However, when a network simulation entity corresponds to a server, it not only possesses physical layer network characteristics but also a logical layer corresponding to the operating system and an application layer corresponding to the users. Therefore, the network simulation entity can be further displayed and analyzed through the logical and application layers. Similarly, when a network simulation entity corresponds to a unit, such as a factory, it can represent an internal local area network within that factory, resulting in multiple operating systems on multiple computers and multiple users distributed across different computer systems.

[0085] Preferred, Figure 6 Display physical layer and Figure 4 The advantage of the former method, which displays three-dimensional geospatial data, lies in its ability to intuitively present the macroscopic architecture of the network and simultaneously display multiple simulated target networks on the same physical layer. The former method is also advantageous because it directly correlates with geographical location, directly representing the spatial distribution of simulated entities in the physical layer onto the geographic system. This allows for a more realistic understanding of their actual spatial distribution characteristics, resulting in a more lifelike perception of the spatial connectivity of lines. For example, if two locations cross a river, the communication link is typically wireless rather than wired. Figure 6 It's not something that can be directly observed. Furthermore, wireless and wired transmission methods differ, and for both sides engaging in offensive and defensive maneuvers in cyberspace, their offensive and defensive tactics must adapt to these differences in communication transmission methods.

[0086] Combination Figure 6 As can be seen, in the simulated target network M1, there is a network simulation entity MP11, which corresponds to two logical objects L1 and L2 in the logic layer. The network simulation entity MP11 and the two logical objects L1 and L2 in the logic layer are mapped and connected by lines. When the network simulation entity MP11 is selected, the mapping connection line will be highlighted, indicating the direct mapping relationship between the network simulation entity MP11 and the two logical objects L1 and L2 in the logic layer.

[0087] Therefore, by understanding the correspondence between the physical layer and the logical layer, the network characteristics of the network simulation entity in the physical layer at the logical layer can be clearly displayed. For example, if the network simulation entity MP11 is a network facility in a factory, this indicates that there are two logical layer objects in the factory network facility, such as two independent industrial operating systems, or databases, communication interconnection protocols, etc.

[0088] Similarly, in Figure 6 The simulation also shows that a network simulation entity in the target network M2 corresponds to a logical object L3 in the logical layer, and logical object L3 corresponds to an application object J1 in the application layer. For example, the network simulation entity is a switch, and the switch has a Windows-based computer operating system, which corresponds to logical object L3. On the computer operating system, there is a registered management user, which corresponds to application object J1. This user has user account, user password, and user permissions set.

[0089] Similarly, logical object L3 in the logic layer and application object J1 in the application layer are also mapped and connected by lines. When logical object L3 is selected, the mapping connection line will be highlighted, indicating the mapping relationship between logical object L3 and application object J1 in the application layer.

[0090] exist Figure 6 The diagram also shows that one network simulation entity in the simulated target network M3 corresponds to a logical object L4 in the logical layer, and another network simulation entity corresponds to a logical object L5 in the logical layer. At the same time, logical object L5 corresponds to two application objects J2 and J3 in the application layer. For specific examples, please refer to the above content, which will not be repeated here.

[0091] Furthermore, at the logical layer, each logical object can be further analyzed and its maintenance characteristics can be presented, including its patching characteristics, upgrade characteristics, and extension characteristics. For example, the various patches, upgrades, and extensions that a software operating system has undergone since its release. Figure 7 As shown, the maintenance features L101 of logical object L1 are visually represented using a star diagram, where each maintenance feature is distinguished by a corresponding code number. Similarly, for the application layer, each application object can further present its security features, including password length, password composition, and password quantity. This visual presentation facilitates targeted vulnerability discovery and the development of targeted network attack strategies.

[0092] pass Figure 6 and Figure 7The layered display not only clearly presents the composition architecture of each simulated target network, but also further reveals the network technical characteristics of simulated entities at the logic and application layers, facilitating further feature analysis and network operation simulation at these layers. Therefore, this display method allows for both a direct, physical-level horizontal presentation and analysis of the simulated target network architecture, and a vertical presentation and analysis of the compositional characteristics of simulated entities at the logic and application layers. Furthermore, the logic and application layers can be further expanded upon within their respective layers. Thus, this presentation and analysis method forms a three-dimensional display architecture, enabling seamless integration of macroscopic and microscopic displays on a single interface, and possesses strong intuitiveness.

[0093] for Figure 1 Step S3, network analysis and simulation, after visually presenting the technical characteristics of the physical layer, logical layer, and application layer, allows for the planning of a network attack scheme against the target network. This includes identifying the specific targets for attack on each of the three layers, such as which communication link, which operating system vulnerability, which user, etc., as well as the attack strategy and timing.

[0094] Furthermore, network simulation and deduction using simulated target networks include: target network operation, target network attack, and target network defense.

[0095] The target network operation includes simulations of network information transmission, information system operation, and user login and usage between network simulation entities over time.

[0096] Targeted network attacks include: simulating physical circuit breaking, virus intrusion, and user account intrusion against network simulation entities at the physical, logical, and application layers over time.

[0097] Target network protection includes: over time, simulating network simulation entities at the physical, logical, and application layers through firewall blocking, virus scanning, and user account modification settings.

[0098] Therefore, this invention discloses a network space modeling and simulation system. The modeling system includes a modeling server and a modeling storage unit. The modeling server is used to edit and set up various types of network entity models, and the modeling storage unit is used to store the network entity models. The simulation system includes a simulation server, on which various types of network entity models are edited and set up. The modeling server and the simulation server are interconnected via a network. The modeling server receives requirement information from the network entity models in the simulation server, constructs corresponding network simulation entities and target networks in the simulation server, and performs simulation analysis and simulation deduction. This modeling and simulation system separates network space model construction from simulation applications while closely integrating them. This facilitates the realization of data services and applications through new business models and reduces the difficulty for users in constructing network space simulation applications, while also improving application efficiency.

[0099] The above description is merely an embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent structural transformations made based on the content of the present invention specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of the present invention.

Claims

1. A modeling system for cyberspace, characterized in that, It includes a modeling server and a modeling storage. The modeling server is used to edit and set various types of network entity models, and the modeling storage is used to store the network entity models. The network entity models include network device models, local area network entity models, private cloud entity models, and / or integrated entity models. The network entity model is represented as follows: in Identifiers representing network entity models, This represents the network entity model. In the configuration options, L1 represents the network entity model. The number of configuration items; the configuration items It includes static configuration items and / or dynamic configuration items, wherein the configuration value of the static configuration item remains unchanged over time, and the configuration value of the dynamic configuration item is dynamically adjusted over time; The modeling server also receives the network entity model requirement information from the simulation system, outputs the network entity model from the modeling memory and sends it to the simulation system, so that the simulation system can construct the corresponding network simulation entity and simulation target network. The modeling server also outputs simulation parameters to the simulation system for simulation analysis and simulation deduction.

2. The cyberspace modeling system according to claim 1, characterized in that, The network entity model It can further include different categories of configuration item groups, namely: This includes the first configuration item group. The number of configuration items in the first configuration item group is L 11 One, L 11 ≥1; This indicates the second configuration item group, which contains L configuration items. 12 One, L 12 ≥1; This represents the Mth configuration item group, where M ≥ 1, and the number of configuration items in it is L. 1M One, L 1M ≥1.

3. The cyberspace modeling system according to claim 1, characterized in that, The modeling server is also used to build network relationship models. in Identifiers representing network relationship models. This represents a network relationship model. In the configuration options, L2 represents the network relationship model. The number of configuration items in the network relationship model; For network entity model Network relationships are established between the corresponding network simulation entities.

4. A simulation system for cyberspace, characterized in that, The system includes a simulation server, which sends network entity model requirement information to the network space modeling system, receives network entity models from the modeling system, assigns values ​​to the configuration items of the network entity models to obtain network simulation entities, and then connects the network simulation entities to the network to construct one or more target networks. The network entity model includes network device model, local area network entity model, private cloud entity model and / or integrated entity model; The network entity model is represented as follows: in Identifiers representing network entity models, This represents the network entity model. In the configuration options, L1 represents the network entity model. The number of configuration items; the configuration items It includes static configuration items and / or dynamic configuration items, wherein the configuration value of the static configuration item remains unchanged over time, and the configuration value of the dynamic configuration item is dynamically adjusted over time; The simulation server also performs visualization analysis and presentation of the characteristics of the target network, receives simulation parameters from the modeling system, and uses the target network to perform network simulation and deduction.

5. The cyberspace simulation system according to claim 4, characterized in that, Network Simulation Entities The corresponding network entity model The simulation entity is generated by assigning values ​​to the configuration items in the configuration file, where x represents the identification number of the network simulation entity.

6. The cyberspace simulation system according to claim 4, characterized in that, For network entity models that include multiple categories of configuration item groups Each configuration item in each configuration item group also has a lower limit value, namely: in Indicates the first configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 11min One, L 11min ≤L 11 ; Indicates the second configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 12min One, L 12min ≤L 12 ; Indicates the second configuration item group The corresponding minimum configuration item group has a minimum quantity of L. 1Mmin One, L 1Mmin ≤L 1M .

7. The cyberspace simulation system according to claim 4, characterized in that, Obtain network simulation entity The method also includes receiving network simulation heterogeneities from different systems. Extraction and recombination were performed, among which Identifiers representing heterogeneous network simulations. This indicates a heterogeneous network simulation. In the configuration value, L3 represents the network simulation heterogeneity. The number of parameters in the file.

8. The cyberspace simulation system according to claim 6, characterized in that, In network analysis and simulation, the characteristics of the target network are visualized and presented, including hierarchical display based on the configuration item group type of the network simulation entities in the target network.

9. The cyberspace simulation system according to claim 8, characterized in that, The target network is displayed in three layers: physical layer, logical layer, and application layer. The physical layer displays network simulation entities in the target network, the physical layer displays the logical objects corresponding to the network simulation entities, and the application layer displays the application objects corresponding to the logical objects.

Images