Network attack and defense combat scenario virtualization simulation method, device and electronic equipment

Abstract

The network attack and defense combat scenario virtualization simulation method, device and electronic device disclosed in the embodiment of the present invention relate to the field of network attack and defense technology, and are convenient for efficiently constructing network attack and defense combat simulation scenarios. The method includes: instantiating a network device model to obtain an instantiated virtual network device corresponding to a physical network device in a network attack and defense scenario; configuring the instantiated virtual network device in communication with the network topology structure in a real network attack and defense scenario to construct multiple first local area networks for simulating the local network topology structure in a real network combat environment; configuring multiple first local area networks to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment. The present invention is suitable for network attack and defense combat deduction, drill, research and analysis scenarios.

Description

Technical Field

[0001] The present invention relates to the field of network attack and defense technology, and in particular to a network attack and defense combat scenario virtualization simulation method, device, electronic equipment and storage medium. Background Art

[0002] With the development of computer information network technology, cyberspace security has attracted more and more attention from relevant parties. In some business scenarios that require simulation, prediction and evaluation of cyberspace combat situations, building a simulated network environment to simulate attack and defense drills has become an essential tool.

[0003] Although this type of simulated network environment can simulate real physical network attack and defense scenarios through Cyber ​​Range (a technology or product based on virtualization technology that simulates and reproduces the operating status and operating environment of network architecture, system equipment, and business processes in real cyberspace), the efficiency of building a simulated network environment of the Cyber ​​Range type is low in some scenarios that require frequent adjustments to the network environment. For example, when building a firewall of a specific brand and version, it will become difficult to construct a network environment with the firewall without a specific firewall image, resulting in low efficiency in building the simulated network environment. Summary of the invention

[0004] In view of this, the embodiments of the present invention provide a network attack and defense combat scenario virtualization simulation method, device, electronic device and storage medium, which are convenient for efficiently constructing a network attack and defense combat simulation scenario, so that it can be applied to some attack and defense combat scenarios that require frequent adjustment of the network environment.

[0005] In a first aspect, an embodiment of the present invention provides a method for virtualizing and simulating a network attack and defense combat scenario, comprising the steps of: instantiating a network device model to obtain an instantiated virtual network device corresponding to a physical network device in the network attack and defense scenario; configuring the instantiated virtual network device in communication with the network topology in the real network attack and defense scenario to construct a plurality of first local area networks for simulating the local network topology in the real network combat environment; configuring the plurality of the first local area networks in communication with each other to obtain a virtualized network attack and defense combat scenario for simulating the real network combat environment.

[0006] Optionally, the instantiating of the network device model to obtain an instantiated virtual network device corresponding to the physical network device in the network attack and defense scenario includes: calling multiple general network device models; determining, according to the real physical network device, component configuration information included in the virtual network device to be instantiated corresponding to each general network device model; and assigning attributes to the components included in each general network device model according to the component configuration information to obtain the corresponding instantiated virtual network device.

[0007] Optionally, before instantiating the network device model, the method further includes: constructing a general network device model, wherein the general network device model includes: a server model, a switch model, a router model, a firewall model and / or a terminal device model.

[0008] Optionally, after constructing multiple first local area networks for simulating local network topology structures in a real network combat environment, the method also includes: deploying the first local area network in a virtual military communication vehicle, and / or deploying the first local area network in a virtual network combat vehicle.

[0009] Optionally, configuring the multiple first local area networks for communication to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment includes: configuring a plurality of virtual military communication vehicles or a plurality of virtual network combat vehicles deployed with the first local area network for communication to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment.

[0010] Optionally, assigning attributes to components included in each general network device model according to the component configuration information includes: calling the component model corresponding to the virtual network device to be instantiated according to the component configuration information, and assigning attributes to the component model; the component model is a reusable model constructed based on the component configuration information of the real physical network device.

[0011] In the second aspect, an embodiment of the present invention also provides a network attack and defense combat scenario virtualization simulation device, including: an instantiation program unit, used to instantiate a network device model to obtain an instantiated virtual network device corresponding to a physical network device in the network attack and defense scenario; a construction program unit, used to configure the instantiated virtual network device in accordance with the network topology in the real network attack and defense scenario, and construct multiple first local area networks for simulating the local network topology in the real network combat environment; a configuration program unit, used to configure the multiple first local area networks to obtain a virtualized network attack and defense combat scenario for simulating the real network combat environment.

[0012] In the third aspect, an embodiment of the present invention further provides an electronic device, comprising: a shell, a processor, a memory, a circuit board and a power supply circuit, wherein the circuit board is placed inside the space enclosed by the shell, and the processor and the memory are arranged on the circuit board; the power supply circuit is used to supply power to various circuits or devices of the above-mentioned electronic device; the memory is used to store executable program code; the processor runs a program corresponding to the executable program code by reading the executable program code stored in the memory, so as to execute the network attack and defense combat scenario virtualization simulation method described in any one of the first aspects mentioned above.

[0013] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the network attack and defense combat scenario virtualization simulation method described in any of the first aspects above.

[0014] The embodiment of the present invention provides a network attack and defense scenario virtualization simulation method, device, electronic device and storage medium. By instantiating a pre-prepared network device model, an instantiated virtual network device corresponding to a physical network device in the network attack and defense scenario can be quickly obtained; after obtaining the required instantiated virtual network device, a communication configuration is performed according to the network topology structure in the real network attack and defense scenario, and multiple first local area networks for simulating the local network topology structure in the real network combat environment can be quickly constructed; thereafter, multiple first local area networks are communicated and configured to obtain a virtualized network attack and defense scenario for simulating the real network combat environment. In this way, even if faced with an attack and defense scenario that requires frequent adjustment of the network environment, it is only necessary to instantiate the pre-prepared network device model and configure its attribute information to quickly obtain the corresponding instantiated virtual network device, thereby facilitating the efficient construction of a network attack and defense simulation scenario, and thus it can be applied to some attack and defense scenarios that require frequent adjustment of the network environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0016] Figure 1 This is a schematic diagram of a flow chart of a method for virtualizing and simulating a network attack and defense scenario according to an embodiment of the present invention;

[0017] Figure 2A schematic diagram of a flow chart of a method for virtualizing and simulating a network attack and defense scenario provided by another embodiment of the present invention;

[0018] Figure 3 A schematic diagram of a flow chart of a method for virtualizing and simulating a network attack and defense scenario provided by another embodiment of the present invention;

[0019] Figure 4 A schematic diagram of the architecture of a virtualized simulation device for network attack and defense scenarios provided by an embodiment of the present invention;

[0020] Figure 5 It is a schematic structural diagram of an embodiment of an electronic device of the present invention. DETAILED DESCRIPTION

[0021] The embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0022] It should be clear that the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0023] Embodiment 1

[0024] Figure 1 This is a flow chart of a virtual simulation method for network attack and defense scenarios according to an embodiment of the present invention. Figure 1 As shown, the network attack and defense combat scenario virtualization simulation method is applicable to scenarios such as network attack and defense combat deduction, drill, research and analysis, and may include the following steps:

[0025] S110: Instantiate the network device model to obtain an instantiated virtual network device corresponding to the physical network device in the network attack and defense scenario.

[0026] Among them, instantiation refers to the process of converting an abstract concept class into a physical object of that class. For example, a server model is used to construct a specific server model instance of a certain series and model of Huawei.

[0027] The network device model can pre-construct multiple types of generic network device models (GenericDevice Model). When a network environment needs to be constructed, a specific virtual network device can be conveniently and quickly constructed by instantiating the virtual network device, solving the problem of constructing a complex network environment.

[0028] Among them, the general device model refers to a virtual general electronic device model built by a software system, including but not limited to a server model, a switch model, a firewall model, a terminal computer model, etc. The device model contains the main component information of the device, such as CPU, memory, network card, etc. When it is necessary to build an instantiated network device model of a specific brand or model, it is only necessary to call the general network device model and instantiate it to obtain the required instantiated virtual network device model.

[0029] In some embodiments, before instantiating the network device model (step S110), the method further includes: S100, constructing a general network device model, the general network device model including: a server model, a switch model, a router model, a firewall model and / or a terminal device model.

[0030] When you need to construct servers, switches, routers, firewalls, and user machines of a specific brand and with specific configuration information, you only need to instantiate the general network device model constructed above to quickly construct an instantiated virtual network device corresponding to the real physical network device.

[0031] S120, configuring the instantiated virtual network device to communicate according to the network topology structure in the real network attack and defense scenario, and constructing a plurality of first local area networks for simulating the local network topology structure in the real network combat environment.

[0032] For example, if the current attack and defense drill requirement is to conduct an attack and defense drill based on the real network topology of a department or unit, first, it is necessary to simulate the real network combat environment.

[0033] Among them, according to the actual network topology of the area, it is necessary to simulate: at least one server, firewall, switch, router and multiple user hosts.

[0034] After the task is clear, the corresponding general network device model is called, the corresponding network device model is instantiated, and the corresponding instantiated server, firewall, switch, router and multiple user host models are obtained.

[0035] After obtaining the instantiated network device model, communication configuration is performed according to the real network topology relationship to construct multiple first local area networks for simulating the local network topology structure in the real network combat environment including the above departments. The communication configuration mainly includes: the connection between network devices.

[0036] S130. Configure the plurality of the first local area networks for communication to obtain a virtualized network attack and defense scenario for simulating a real network combat environment.

[0037] The first local area network can be a network topology model within a department or a small area. After multiple first local area networks are connected and configured, a virtualized network attack and defense scenario for simulating a unit or a larger area is obtained.

[0038] In this embodiment, by instantiating the pre-prepared network device model, the instantiated virtual network device corresponding to the physical network device in the network attack and defense scenario can be quickly obtained; after obtaining the required instantiated virtual network device, the network topology structure in the real network attack and defense scenario is configured for communication, and multiple first local area networks for simulating the local network topology structure in the real network combat environment can be quickly constructed; then, multiple first local area networks are configured for communication, and a virtualized network attack and defense combat scenario for simulating the real network combat environment can be obtained. In this way, even if faced with an attack and defense combat scenario that requires frequent adjustment of the network environment, it is only necessary to instantiate the pre-prepared network device model and configure its attribute information to quickly obtain the corresponding instantiated virtual network device, thereby facilitating the efficient construction of a network attack and defense combat simulation scenario, so that it can be applied to some attack and defense combat scenarios that require frequent adjustment of the network environment.

[0039] Please see Figure 2 As shown, in some embodiments, the instantiation of the network device model to obtain an instantiated virtual network device corresponding to the physical network device in the network attack and defense scenario (S110) includes:

[0040] S111. Call multiple general network device models.

[0041] In this embodiment, the general network device model includes, for example, general device models such as switches, servers, and firewalls.

[0042] S113: Determine, according to the real physical network device, component configuration information included in the virtual network device to be instantiated corresponding to each general network device model.

[0043] For example, if the real physical server in a department or unit is a Huawei server, the component configuration information of the corresponding virtual server to be instantiated is consistent with the specific parameters of the Huawei server, and its specific parameters (configuration information) are as shown in Table 1 below:

[0044]

[0045] Table 1

[0046] S115. According to the component configuration information, assign attributes to the components included in each general network device model to obtain a corresponding instantiated virtual network device.

[0047] In this embodiment, after determining the component configuration information of the virtual network device to be instantiated, the attributes of each component included in the general network device model are assigned to obtain the corresponding instantiated virtual network device. Still taking a certain Huawei server as an example, after determining its specific parameter information, the attributes of the brand name, model, CPU, graphics card, memory, network card and other components included in the general server model are assigned, that is, specific parameters are added. For example, for a service, the attribute assignment may include: the MAC address of the physical network card, the parameters of the CPU, the parameters of the graphics card, the memory parameters and the IP address of the server, etc.

[0048] It should be noted that, in this embodiment, a server is used as an example for description, and other types of network devices are similarly operated. For example, for a switch, specific parameters of the switch to be instantiated are as shown in Table 2 below:

[0049]

[0050] Table 2

[0051] According to the specific parameters of the switch to be instantiated, component attributes are assigned to the general switch device model, and the specific attribute assignments are consistent with the specific parameters of the above-mentioned real physical switch.

[0052] For another example, for a firewall, the specific parameters of the switch to be instantiated are shown in Table 3 below:

[0053]

[0054] Table 3

[0055] According to the specific parameters of the firewall machine to be instantiated, component attributes of the general firewall device model are assigned, and the specific attribute assignments are consistent with the specific parameters of the above-mentioned real physical firewall.

[0056] Specifically, for the CPU component, the specific parameters of the CPU to be instantiated are shown in Table 4 below:

[0057]

[0058]

[0059] Table 4

[0060] According to the specific parameters of the CPU component to be instantiated, specific parameters are added to the general CPU model, that is, component attributes are assigned to the general CPU model, and the specific attribute assignments are consistent with the specific parameters of the above-mentioned real CPU.

[0061] For the motherboard component, the specific parameters of the motherboard to be instantiated are shown in Table 5 below:

[0062]

[0063] Table 5

[0064] According to the specific parameters of the motherboard to be instantiated, specific parameters are added to the general motherboard model, that is, component attributes are assigned to the general motherboard model, and the specific attribute assignments are consistent with the specific parameters of the above-mentioned real motherboard.

[0065] For the network card component, the specific parameters of the network card to be instantiated are shown in Table 6 below:

[0066]

[0067] Table 6

[0068] According to the specific parameters of the network card to be instantiated, specific parameters are added to the general network card model, that is, component attributes are assigned to the general network card model, and the specific attribute assignments are consistent with the specific parameters of the above-mentioned real network card.

[0069] In some embodiments, in addition to preparing a general network device model in advance, some knowledge models need to be prepared, for example, a vulnerability component, which is used to add vulnerability attributes to the instantiated virtual network device. An exemplary vulnerability specific parameter is shown in Table 7:

[0070]

[0071] Table 7

[0072] Of course, it is understandable that in addition to the above-mentioned vulnerability components, the knowledge model can also include: patch components, attack and defense framework components, etc., to build a simulated attack and defense combat network environment, to help combat commanders discover the vulnerabilities and loopholes of the simulated network environment, so as to make timely repairs to improve the effectiveness of network defense.

[0073] In this embodiment, after assigning attributes to the components included in each general network device model, a corresponding instantiated virtual network device is obtained to simulate a node device in a real network topology structure.

[0074] In some embodiments, assigning attributes to components included in each general network device model according to the component configuration information includes: calling the component model corresponding to the virtual network device to be instantiated according to the component configuration information, and assigning attributes to the component model; the component model is a reusable model constructed based on the component configuration information of the real physical network device.

[0075] In the process of instantiating the general network device model, it is necessary to add necessary attribute values ​​to the component, such as: brand name, IP address, Mac (physical address), DNs (domain name) information, as well as the device's user information, organization information, etc., to simulate a real physical network device.

[0076] In this embodiment, by pre-building a reusable model based on the component configuration information of the real physical network device, when the network device model needs to be instantiated, there is no need to start the virtual machine. It is only necessary to call the network device model and the component model contained therein in the business system. The storage and computing resources consumed by the instantiated virtual network device model construction are very small, which can improve the efficiency of instantiating the virtual network device construction.

[0077] It is understandable that cyberspace warfare is increasingly becoming a focus of research. In order to be applicable to cyber warfare research, in some embodiments, after constructing multiple first local area networks for simulating local network topology structures in a real cyber warfare environment, the method further includes: deploying the first local area network in a virtual military communication vehicle, and / or deploying the first local area network in a virtual cyber warfare vehicle. In this embodiment, the general device model is configured for communication to form a small local area network, which can be arranged in a virtual military communication vehicle or a virtual cyber warfare vehicle. In this way, the cyber warfare environment can be simulated for cyber warfare research and attack and defense training.

[0078] In order to simulate a larger-scale combat environment, in some embodiments, configuring the multiple first local area networks for communication to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment includes: configuring the multiple virtual military communication vehicles or multiple virtual network combat vehicles deployed with the first local area network for communication to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment.

[0079] In this way, after a small local area network is deployed on each virtual combat vehicle, multiple such combat vehicles are configured through communication to form a larger local area network, thereby simulating a real network combat environment.

[0080] In order to help understand the technical solution and technical effects of the present invention, the following is a detailed description in conjunction with a specific cyberspace combat application example:

[0081] Purpose of deploying the simulation of the cyberspace combat environment: Combat commanders need to understand the overall situation and status of a certain area's network based on the network attack and defense combat scenario. With the help of the network attack and defense combat scenario constructed by the embodiment of the present invention, they can understand, deduce and analyze the entire cyberspace battlefield situation from a bird's eye view.

[0082] Based on the network attack and defense combat scenario virtualization simulation method provided by the embodiment of the present invention, the network attack and defense combat scenario is constructed. Please refer to Figure 3 As shown, the specific steps are as follows:

[0083] S1. Construct a general network device model. Of course, the network device model can also be prepared in advance. The network device model includes: servers, switches, routers, firewalls, user hosts, etc., and some initialization information such as brand can be configured for the network device model.

[0084] S2. Instantiate the general network device model, for example, assign values ​​to the attributes of the network device model, including: attribute information of the CPU, MAC address and IP address of the network card, the name of the software installed on the device, vulnerabilities in the software and hardware, etc., to obtain an instantiated virtual network device model that simulates a real physical network device, such as simulating a certain model of Huawei server, a CPU of Intel model number, etc.

[0085] S3. After instantiating various virtual network device models, the instantiated virtual network devices are configured to communicate with each other according to the real network topology to form a small local area network. The communication configuration is actually the process of configuring the connection relationship between instantiated virtual network devices such as servers, switches, and firewalls. In the specific implementation process, it is necessary to complete the functional tasks of creating the relationship between them and naming the relationship. In this way, by obtaining various instantiated virtual network device models and completing the communication configuration according to the real network topology, a network topology relationship consisting of servers, firewalls, switches, etc. is formed, that is, Figure 3 The task of creating communication relationships and building model combinations in the process. On this basis, we can further build a local area network that meets the local combat network by communicating with wireless hotspot devices (as relay node devices).

[0086] The communication configuration process also includes: determining whether a communication relationship exists; if so, directly building a model combination, that is, connecting each instantiated virtual network device to form a local area network. If not, creating a communication relationship, after the creation is completed, building a model combination, that is, connecting each instantiated virtual network device to form a local area network.

[0087] After the model combination is constructed, the method may further include:

[0088] S4. Deploy the constructed local area network to each combat unit. S5. Configure relay nodes between each combat unit to achieve the purpose of connecting the entire combat network and simulate network attack and defense combat scenarios.

[0089] In the above process, the vulnerabilities and exposure surfaces in the entire network can be configured to help combat commanders conduct security defense analysis.

[0090] In this embodiment, through the above steps, a special virtual network environment is constructed, which can be assembled into a combat vehicle or a communication vehicle. Based on the module construction technology, each node device supports flexible adjustment of configurable properties, thereby achieving networking flexibility, which is convenient for use in offensive and defensive combat scenarios where the offensive and defensive network environment is frequently adjusted.

[0091] Furthermore, by simulating a real combat network environment, combat commanders can not only understand the entire network environment from a macro level, but also be familiar with the specific problems of each node, the vulnerability and exposure of the entire network from a micro level. In turn, they can improve the overall defense capability by upgrading software, strengthening firewalls and other measures.

[0092] In addition, in the relevant network target range construction technology, the resource requirements are relatively strict. For example, to construct a simulation environment with 100 nodes, 100 virtual machines need to be started, and sufficient computing and storage resources need to be configured to support the simulation scenario.

[0093] In this embodiment, in the process of module construction (Model Construct, which refers to constructing an instantiated virtual network device model into a virtual network environment through communication configuration), there is no need to start the virtual machine, but only perform component attribute assignment operations on the network device model in the business system. Therefore, compared with the solution of constructing a network target range simulation scenario in a virtual machine environment, the storage and computing resources consumed by the construction of the device module are very small.

[0094] Furthermore, since the storage and computing resources consumed by the embodiment of the present invention for constructing the simulation scene are very small, it supports the construction of network topology in special construction scenarios, such as initializing hundreds of servers or terminal computers of a specific brand to form a network.

[0095] Furthermore, in the process of building an instantiated virtual network device model, when configuring properties, it can also be associated with related knowledge models such as vulnerabilities, patches, and attack and defense frameworks. The resulting attack and defense combat network environment can help combat commanders or administrators intuitively discover the vulnerabilities and loopholes of the current network and repair them in a timely manner, thereby improving the effectiveness of network defense.

[0096] Embodiment 2

[0097] Figure 4 A schematic diagram of the architecture of a network attack and defense scenario virtualization simulation device provided by an embodiment of the present invention; based on the technical concept of the technical solution provided in the first embodiment, as Figure 4As shown, the network attack and defense combat scenario virtualization simulation device 200 provided by the embodiment of the present invention includes:

[0098] The instantiation program unit 210 is used to instantiate the network device model to obtain an instantiated virtual network device corresponding to the physical network device in the network attack and defense scenario;

[0099] A construction program unit 220 is used to configure the instantiated virtual network device according to the network topology structure in the real network attack and defense scenario, and construct a plurality of first local area networks for simulating the local network topology structure in the real network combat environment;

[0100] The configuration program unit 230 is used to configure the plurality of the first local area networks to communicate with each other and obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment.

[0101] The device of this embodiment can be used to execute the technical solution of the method embodiment shown in Embodiment 1. Its implementation principle and technical effects are similar and will not be described in detail here.

[0102] Embodiment 3

[0103] Figure 5 This is a schematic diagram of the structure of an embodiment of an electronic device of the present invention. Based on the technical concept of the network attack and defense combat scenario virtualization simulation method provided in the aforementioned embodiment one, the present invention also provides an electronic device according to an embodiment, which can implement the method step flow of any embodiment described in embodiment one of the present invention.

[0104] The above-mentioned electronic device may include: a shell 41, a processor 42, a memory 43, a circuit board 44 and a power supply circuit 45, wherein the circuit board 44 is placed inside the space enclosed by the shell 41, and the processor 42 and the memory 43 are arranged on the circuit board 44; the power supply circuit 45 is used to supply power to various circuits or devices of the above-mentioned electronic device; the memory 43 is used to store executable program codes; the processor 42 runs the program corresponding to the executable program code by reading the executable program code stored in the memory 43, so as to execute the network attack and defense combat scenario virtualization simulation method described in any of the above-mentioned embodiments one.

[0105] The specific execution process of the above steps by the processor 42 and the steps further executed by the processor 42 by running the executable program code can be found in the description of the previous embodiment, which will not be repeated here.

[0106] This electronic device exists in many forms, including but not limited to:

[0107] (1) Mobile communication devices: These devices are characterized by their mobile communication functions and their main purpose is to provide voice and data communications. These terminals include: smart phones (such as iPhone), multimedia phones, functional phones, and low-end phones.

[0108] (2) Ultra-mobile personal computer devices: These devices fall into the category of personal computers, have computing and processing capabilities, and generally also have mobile Internet access features. These terminals include: PDA, MID and UMPC devices, such as iPad.

[0109] (3) Portable entertainment devices: These devices can display and play multimedia content. They include audio and video players (such as iPods), handheld game consoles, e-books, smart toys, and portable car navigation devices.

[0110] (4) Server: A device that provides computing services. The server consists of a processor, hard disk, memory, system bus, etc. The server is similar to a general computer architecture, but because it needs to provide highly reliable services, it has higher requirements in terms of processing power, stability, reliability, security, scalability, and manageability.

[0111] (5) Other electronic devices with data interaction functions.

[0112] An embodiment of the present invention also provides a computer-readable storage medium, which stores one or more programs. The one or more programs can be executed by one or more processors to implement any network attack and defense combat scenario virtualization simulation method provided by the aforementioned embodiments. Therefore, the corresponding technical effects can also be achieved. The above text has already described them in detail and will not be repeated here.

[0113] From the above public description, it can be seen that the network attack and defense combat scenario virtualization simulation method, device, electronic device and storage medium provided by the embodiments of the present invention are convenient for efficiently constructing network attack and defense combat simulation scenarios, and can thus be applied to some attack and defense combat scenarios that require frequent adjustment of the network environment.

[0114] Furthermore, in the process of constructing network attack and defense simulation scenarios, based on module construction technology, each node device supports flexible adjustment of configurable properties, realizing the flexibility of networking, which is convenient for use in attack and defense combat scenarios where the attack and defense network environment is frequently adjusted.

[0115] Furthermore, during the module construction process, there is no need to start the virtual machine, only the component attribute assignment operation of the network device model is performed in the business system. Therefore, compared with the solution of building a network attack and defense simulation scenario in a virtual machine environment, the storage and computing resources consumed by the module construction are very small.

[0116] Furthermore, the embodiments of the present invention support the construction of network topology in special construction scenarios, such as initializing hundreds of servers or terminal computers of a specific brand to form a network.

[0117] Furthermore, in the process of building an instantiated virtual network device model, when configuring properties, it can also be associated with related knowledge models such as vulnerabilities, patches, and attack and defense frameworks. The resulting attack and defense combat network environment can help combat commanders or administrators intuitively discover the vulnerabilities and loopholes of the current network and repair them in a timely manner, thereby improving the effectiveness of network defense.

[0118] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0119] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referenced to each other, and each embodiment focuses on the differences from other embodiments.

[0120] In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0121] For the convenience of description, the above device is described by dividing the functions into various units / modules. Of course, when implementing the present invention, the functions of each unit / module can be implemented in the same or multiple software and / or hardware.

[0122] A person skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The storage medium can be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.

[0123] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A network attack and defense scenario virtualization simulation method, characterized in that: Includes steps: Instantiate the network device model to obtain an instantiated virtual network device corresponding to the physical network device in the network attack and defense scenario; The instantiated virtual network device is configured for communication according to the network topology structure in the real network attack and defense scenario, so as to construct a plurality of first local area networks for simulating the local network topology structure in the real network combat environment; Connecting and configuring the plurality of the first local area networks to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment; The instantiation of the network device model to obtain an instantiated virtual network device corresponding to the physical network device in the network attack and defense scenario includes: Call multiple general network device models; According to the real physical network device, determine the component configuration information included in the virtual network device to be instantiated corresponding to each general network device model; According to the component configuration information, assigning attributes to the components included in each general network device model to obtain a corresponding instantiated virtual network device; After constructing a plurality of first local area networks for simulating the local network topology in a real network combat environment, the method further includes: deploying the first local area network in a virtual military communication vehicle, and / or, deploying the first local area network in a virtual network combat vehicle; The step of configuring the plurality of the first local area networks for communication to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment includes: configuring a plurality of virtual military communication vehicles or a plurality of virtual network combat vehicles deployed with the first local area network for communication to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment; The assigning of attributes to the components included in each general network device model according to the component configuration information includes: calling the component model corresponding to the virtual network device to be instantiated according to the component configuration information, and assigning attributes to the component model; the component model is a reusable model constructed based on the component configuration information of the real physical network device.

2. The network attack and defense scenario virtualization simulation method according to claim 1 is characterized in that: Before instantiating the network device model, the method further includes: constructing a general network device model, wherein the general network device model includes: a server model, a switch model, a router model, a firewall model and / or a terminal device model.

3. A network attack and defense combat scenario virtualization simulation device, characterized in that: include: An instantiation program unit is used to instantiate the network device model to obtain an instantiated virtual network device corresponding to the physical network device in the network attack and defense scenario; A construction program unit is used to configure the instantiated virtual network device according to the network topology structure in the real network attack and defense scenario, and construct a plurality of first local area networks for simulating the local network topology structure in the real network combat environment; A configuration program unit, used for configuring the plurality of the first local area networks to communicate with each other, and obtaining a virtualized network attack and defense combat scenario for simulating a real network combat environment; The instantiation program unit is specifically used to call multiple general network device models; According to the real physical network device, determine the component configuration information included in the virtual network device to be instantiated corresponding to each general network device model; According to the component configuration information, assigning attributes to the components included in each general network device model to obtain a corresponding instantiated virtual network device; The device further comprises: a combat deployment program unit, which is used to deploy the first local area network in a virtual military communication vehicle after constructing a plurality of first local area networks for simulating the local network topology structure in a real network combat environment, and / or to deploy the first local area network in a virtual network combat vehicle; The step of configuring the plurality of the first local area networks for communication to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment includes: configuring a plurality of virtual military communication vehicles or a plurality of virtual network combat vehicles deployed with the first local area network for communication to obtain a virtualized network attack and defense combat scenario for simulating a real network combat environment; The assigning of attributes to the components included in each general network device model according to the component configuration information includes: calling the component model corresponding to the virtual network device to be instantiated according to the component configuration information, and assigning attributes to the component model; the component model is a reusable model constructed based on the component configuration information of the real physical network device.

4. An electronic device, characterized in that: The electronic device comprises: a shell, a processor, a memory, a circuit board and a power supply circuit, wherein the circuit board is placed inside the space enclosed by the shell, and the processor and the memory are arranged on the circuit board; the power supply circuit is used to supply power to various circuits or devices of the above-mentioned electronic device; the memory is used to store executable program codes; the processor runs a program corresponding to the executable program code by reading the executable program code stored in the memory, so as to execute the network attack and defense combat scenario virtualization simulation method described in any one of claims 1 to 2.

5. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the network attack and defense combat scenario virtualization simulation method described in any one of claims 1 to 2.

Images