Method, apparatus, storage medium, and electronic device for drawing indication information

Abstract

The present application discloses a method, apparatus, storage medium, and electronic device for drawing indication information. The method includes: obtaining an instruction for generating indication information of a network attack event generated by a system, parsing the instruction for generating indication information to obtain a starting coordinate, an ending coordinate, and a precision value of the network attack event on a target sphere; determining the number of key points and the number of projection layers required for generating the indication information according to the precision value, and calculating the spherical coordinates of each key point on the target sphere according to the starting coordinate and the ending coordinate to obtain a plurality of spherical coordinates; determining the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates to obtain a plurality of projection coordinates, and connecting the starting coordinate, the ending coordinate, and the plurality of projection coordinates in a preset style to obtain the indication information. Through the present application, the problem in the related art that the user cannot clearly and conveniently determine the network attack path due to the display of network attack information through a chart is solved.

Description

Technical Field

[0001] The present application relates to the field of network security. Specifically, it relates to a method, device, storage medium, and electronic device for drawing indication information. Background Art

[0002] In the Internet, network attacks exist all the time. In order to prevent or monitor these network attacks, many users will purchase some security products. After detecting a network attack, the security products usually present the content of the attack in the form of a chart, including information such as the attacker, the attacked party, and the attack form.

[0003] However, presenting attack information in the form of a chart often fails to display the attack information intuitively. Users need to process the chart by themselves in order to more intuitively identify the content of the network attack. However, self-processing by users will increase the workload of users and reduce the willingness and efficiency of users to use security products.

[0004] Regarding the problem that users cannot clearly and conveniently determine the network attack path due to the display of network attack information through a chart in the related art, no effective solution has been proposed yet. Summary of the Invention

[0005] The present application provides a method, device, storage medium, and electronic device for drawing indication information to solve the problem that users cannot clearly and conveniently determine the network attack path due to the display of network attack information through a chart in the related art.

[0006] According to one aspect of the present application, a method for drawing indication information is provided. The method includes: obtaining an instruction for generating indication information of a network attack event generated by the system, parsing the instruction for generating indication information to obtain the starting coordinate, ending coordinate, and accuracy value of the network attack event on the target sphere; determining the number of key points and the number of projection layers required for generating the indication information according to the accuracy value, and calculating the spherical coordinates of each key point on the target sphere according to the starting coordinate and the ending coordinate to obtain a plurality of spherical coordinates, wherein the projection layer is located on the outer layer of the target sphere and the key points are located on the projection layer; determining the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates to obtain a plurality of projection coordinates, and connecting the starting coordinate, the ending coordinate, and the plurality of projection coordinates in a preset style to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate.

[0007] Optionally, determining the number of key points and the number of projection layers required to generate the indication information according to the accuracy value includes: obtaining a relationship table between the accuracy value and the number of key points, and determining the number of key points corresponding to the accuracy value according to the relationship table, where the relationship table includes multiple accuracy values and the number of key points corresponding to each accuracy value; determining the number of projection layers based on the criterion that the upper limit of the number of key points on each projection layer is 2, where the spacing between multiple projection layers is the same.

[0008] Optionally, calculating the spherical coordinates of each key point on the target sphere according to the starting coordinate and the ending coordinate includes: determining the center of the target sphere, connecting the center of the sphere with the starting coordinate to obtain a starting line segment, and connecting the center of the sphere with the ending coordinate to obtain an ending line segment; obtaining the included angle value of the included angle formed by the starting line segment and the ending line segment to obtain the central included angle value; dividing the central included angle value to obtain a plurality of first included angle values equal to the number of key points, where each first included angle value is the included angle value between each first line segment and the starting line segment, and the first line segment is the line segment obtained by connecting the key point with the center of the sphere; respectively determining the initial arc length between the key point and the starting coordinate according to each first included angle value to obtain a plurality of initial arc lengths, where the initial arc length refers to the arc length of the arc formed by the key point and the starting coordinate on the surface of the target sphere; calculating the spherical coordinates of each key point on the target sphere according to the plurality of initial arc lengths, the starting coordinate, and the ending coordinate.

[0009] Optionally, calculating the spherical coordinates of each key point on the target sphere according to the plurality of initial arc lengths, the starting coordinate, and the ending coordinate includes: calculating the arc length between the starting coordinate and the ending coordinate according to the central included angle value and the radius of the target sphere to obtain the target arc length; sequentially dividing each initial arc length by the target arc length to obtain the arc length ratio between each initial arc length and the target arc length to obtain a plurality of arc length ratios; determining the spherical coordinates of each key point on the target sphere according to each arc length ratio, the starting coordinate, and the ending coordinate.

[0010] Optionally, connecting the starting coordinate, the ending coordinate, and a plurality of projection coordinates in a preset style to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate includes: obtaining the front view of the target sphere, and obtaining the coordinates of the center point of the front view on the spherical surface of the target sphere to obtain the center coordinate; connecting the center point with the center of the target sphere to obtain a second line segment; sequentially determining the included angle values between the second line segment and the starting line segment, the ending line segment, and a plurality of first line segments to obtain a plurality of candidate included angle values; obtaining the points where the candidate included angle values are less than or equal to the preset included angle value to obtain at least one target point, and sequentially connecting the at least one target point in a preset style to obtain the indication information; in the case where all candidate included angle values are greater than the preset included angle value, determining the indication information as empty.

[0011] Optionally, coordinates of each key point on the corresponding projection layer are determined according to multiple spherical coordinates, and multiple projection coordinates are obtained, including: determining the distances between the spherical coordinates of each key point and the starting coordinates to obtain multiple first distances; determining the distances between the spherical coordinates of each key point and the ending coordinates to obtain multiple second distances; calculating the absolute values of the differences between the first distances and the second distances corresponding to each spherical coordinate to obtain the absolute value information corresponding to each key point; setting each key point on different projection layers according to the magnitude relationship of the absolute value information of multiple key points, and determining the projection coordinates of each key point on the projection layer.

[0012] Optionally, setting each key point on different projection layers according to the magnitude relationship of the absolute value information of multiple key points, and determining the projection coordinates of each key point on the projection layer includes: sorting the multiple absolute value information from large to small to obtain an absolute value sequence; sequentially setting each key point from low to high on multiple projection layers according to the absolute value sequence, and determining the spherical coordinates of the key point on the target sphere as the projection coordinates, where the absolute value information is negatively correlated with the distance between the projection layer where the key point is located and the target sphere, and key points with the same absolute value information are located on the same projection layer.

[0013] According to another aspect of the present application, a drawing device for indication information is provided. The device includes: an acquisition unit, configured to acquire an instruction for generating indication information of a network attack event generated by the system, and parse the instruction for generating indication information to obtain the starting coordinates, ending coordinates, and accuracy value of the network attack event on the target sphere; a determination unit, configured to determine the number of key points and the number of projection layers required for generating the indication information according to the accuracy value, and calculate the spherical coordinates of each key point on the target sphere according to the starting coordinates and the ending coordinates to obtain multiple spherical coordinates, where the projection layer is located on the outer layer of the target sphere and the key points are located on the projection layer; a generation unit, configured to determine the coordinates of each key point on the corresponding projection layer according to the multiple spherical coordinates to obtain multiple projection coordinates, and connect the starting coordinates, ending coordinates, and multiple projection coordinates according to a preset style to obtain the indication information of the network attack event from the starting coordinates to the ending coordinates.

[0014] According to another aspect of the embodiments of the present invention, a computer storage medium is further provided. The computer storage medium is used to store a program, where when the program runs, it controls a device where the computer storage medium is located to execute a method for drawing indication information.

[0015] According to another aspect of the embodiments of the present invention, an electronic device is further provided, including one or more processors and a memory; the memory stores computer-readable instructions, and the processor is configured to run the computer-readable instructions, where when the computer-readable instructions run, they execute a method for drawing indication information.

[0016] Through this application, the following steps are adopted: obtaining an instruction for generating an indication information of a network attack event generated by the system, parsing the instruction for generating the indication information to obtain the starting coordinates, ending coordinates and accuracy value of the network attack event on the target sphere; determining the number of key points and the number of projection layers required for generating the indication information according to the accuracy value, and calculating the spherical coordinates of each key point on the target sphere according to the starting coordinates and the ending coordinates to obtain a plurality of spherical coordinates, wherein the projection layer is located on the outer layer of the target sphere and the key points are located on the projection layer; determining the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates to obtain a plurality of projection coordinates, and connecting the starting coordinates, the ending coordinates and the plurality of projection coordinates in a preset format to obtain the indication information of the network attack event from the starting coordinates to the ending coordinates. The problem that in the related art, the network attack information is displayed through a chart, resulting in the user being unable to clearly and conveniently determine the network attack path is solved. By determining the position information of the key points between the starting coordinates and the ending coordinates and the number of projection layers, and then displaying the projection coordinates of each key point on the projection layer, and connecting the plurality of projection coordinates with the starting coordinates and the ending coordinates in a preset format, thereby generating the indication information located above the sphere. Furthermore, the effect of intuitively displaying the attack information to the user through the indication information under the preset format located above the sphere is achieved. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The accompanying drawings, which form a part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions thereof of this application are used to explain this application and do not constitute an improper limitation to this application. In the drawings:

[0018] Figure 1 is a flowchart of a method for drawing indication information according to an embodiment of this application;

[0019] Figure 2 is a schematic diagram of an optional projection layer style according to an embodiment of this application;

[0020] Figure 3 is a schematic diagram of an optional target sphere coordinate system according to an embodiment of this application;

[0021] Figure 4 is a schematic diagram of a device for drawing indication information according to an embodiment of this application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0022] It should be noted that, without conflict, the embodiments in this application and the features in the embodiments can be combined with each other. The following will refer to the accompanying drawings and combine the embodiments to detail this application.

[0023] To enable those skilled in the art to better understand the solution of this application, the following will clearly and completely describe the technical solution in the embodiments of this application in conjunction with the accompanying drawings in the embodiments of this application. Obviously, the described embodiments are only a part of the embodiments of this application, rather than all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of this application.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of this application and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily need to be used to describe a specific order or sequence. It should be understood that such data used in appropriate cases can be interchanged so as to implement the embodiments of this application described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products, or devices.

[0025] It should be noted that the relevant information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for display, data for analysis, etc.) involved in this disclosure are all information and data authorized by the user or fully authorized by all parties. For example, an interface is set between this system and relevant users or institutions. Before obtaining relevant information, a request for acquisition needs to be sent to the aforementioned user or institution through the interface, and after receiving the consent information feedback from the aforementioned user or institution, the relevant information can be obtained.

[0026] According to an embodiment of this application, a method for drawing indication information is provided.

[0027] Figure 1 is a flowchart of the method for drawing indication information according to an embodiment of this application. As Figure 1 shown, the method includes the following steps:

[0028] Step S101, obtain an instruction for generating indication information of a network attack event generated by the system, and parse the instruction for generating indication information to obtain the starting coordinate, ending coordinate, and accuracy value of the network attack event on the target sphere.

[0029] Specifically, after the security monitoring system of the security product detects a network attack event, it is necessary to generate an instruction for generating indication information based on the detected network attack event, and generate indication information corresponding to the network attack event through this generated instruction. Among them, the instruction for generating indication information includes the attacker address of this network attack event, that is, the starting coordinate, the attacked party address, that is, the ending coordinate, and the precision value of the indication information preset by the user. This precision value is used to determine the reference point required for generating the indication information, that is, the key point.

[0030] It should be noted that the target sphere can be a model of the earth. Similar to the earth, there are longitude and latitude information on the target sphere. The starting address and the ending address are both the longitude and latitude information of the attacker and the attacked party. When the target sphere rotates, the longitude and latitude information of the starting address and the ending address remains unchanged, so it will rotate with the rotation of the target sphere.

[0031] Step S102, determine the number of key points and the number of projection layers required for generating the indication information according to the precision value, and calculate the spherical coordinates of each key point on the target sphere based on the starting coordinate and the ending coordinate, obtaining a plurality of spherical coordinates. Among them, the projection layer is located on the outer layer of the target sphere, and the key points are located on the projection layer.

[0032] Specifically, after obtaining the precision value, the number of key points on the indication information and the number of projection layers can be determined according to the precision value, and the position of each key point on the target sphere can be determined, so as to determine the generation path of the indication information according to the position information of the key points, thereby ensuring the accurate generation of the indication information.

[0033] Step S103, determine the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates, obtaining a plurality of projection coordinates, and connect the starting coordinate, the ending coordinate and the plurality of projection coordinates in a preset format to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate.

[0034] Specifically, after determining the spherical coordinates of the key points on the target sphere, it is necessary to determine the projection coordinates of each key point according to the projection layer where the key point is located, so as to connect the starting coordinate, the ending coordinate and the plurality of projection coordinates in a preset format to obtain the indication information. Among them, the preset format can be changed according to the attack content. For example, when the attack content is A, the preset format can be the format corresponding to A. The format can include color, shape, etc., so that the corresponding indication information can be sent to the user in a targeted manner, and then the user can more intuitively determine the content of the attack information according to the indication information.

[0035] The method for drawing indication information provided by the embodiment of the present application generates an instruction by obtaining the indication information of the network attack event generated by the system, parses the indication information generation instruction, and obtains the starting coordinate, ending coordinate and precision value of the network attack event on the target sphere; determines the number of key points and the number of projection layers required for generating the indication information according to the precision value, and calculates the spherical coordinates of each key point on the target sphere according to the starting coordinate and the ending coordinate, obtaining a plurality of spherical coordinates, wherein the projection layer is located on the outer layer of the target sphere, and the key points are located on the projection layer; determines the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates, obtains a plurality of projection coordinates, and connects the starting coordinate, the ending coordinate and the plurality of projection coordinates in a preset style to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate. This solves the problem in the related art that the user cannot clearly and conveniently determine the network attack path by displaying network attack information through a chart. By determining the position information of the key points between the starting coordinate and the ending coordinate and the number of projection layers, and then displaying the projection coordinates of each key point on the projection layer, and connecting the plurality of projection coordinates with the starting coordinate and the ending coordinate in a preset style, the indication information located above the sphere is generated. Furthermore, the effect of intuitively displaying the attack information to the user through the indication information under the preset style located above the sphere is achieved.

[0036] Optionally, in the method for drawing indication information provided by the embodiment of the present application, determining the number of key points and the number of projection layers required for generating the indication information according to the precision value includes: obtaining a relationship table between the precision value and the number of key points, and determining the number of key points corresponding to the precision value according to the relationship table, wherein the relationship table includes a plurality of precision values and the number of key points corresponding to each precision value; determining the number of projection layers based on the criterion that the upper limit of the number of key points on each projection layer is 2, and the spacing between the plurality of projection layers is the same.

[0037] Specifically, after the precision value is determined, the number of key points required to form the indication information under this precision value can be determined according to the preset relationship table. Further, in order to ensure the generation of accurate indication information, therefore, the maximum number of key points on each projection layer is two, and the key points need to be symmetrically distributed around the center, so as to ensure that the generated indication information is optimal in appearance and accuracy.

[0038] For example, Figure 2 is a schematic diagram of an optional projection layer style provided by the embodiment of the present application, as Figure 2 shown, Figure 2 the central circle of which is used to represent the target sphere. In order to clearly show the styles of the key points and the projection layer, Figure 2Rotate the target sphere so that both the starting coordinate and the ending coordinate are on the edge of the central circle. Point P1 is the starting coordinate and point P2 is the ending coordinate. When the number of key points is 1, there is only key point H3, and there is also a projection layer a. When the number of key points is 3, there are key points H2, H3, and H4, and there are two projection layers a and b. When the number of key points is 5, there are key points H1, H2, H3, H4, and H5, and there are three projection layers a, b, and c. Thus, the number of key points and projection layers can be determined according to the accuracy set by the user, and then the indication information required by the user can be generated.

[0039] Optionally, in the method for drawing the indication information provided in the embodiment of the present application, calculating the spherical coordinates of each key point on the target sphere according to the starting coordinate and the ending coordinate includes: determining the center of the target sphere, connecting the center of the sphere with the starting coordinate to obtain a starting line segment, and connecting the center of the sphere with the ending coordinate to obtain an ending line segment; obtaining the included angle value of the included angle formed by the starting line segment and the ending line segment to obtain the central angle value of the sphere; dividing the central angle value of the sphere to obtain a plurality of first included angle values equal to the number of key points, where each first included angle value is the included angle value between each first line segment and the starting line segment, and the first line segment is the line segment obtained by connecting the key point and the center of the sphere; respectively determining the initial arc length between the key point and the starting coordinate according to each first included angle value to obtain a plurality of initial arc lengths, where the initial arc length refers to the arc length of the arc formed by the key point and the starting coordinate on the surface of the target sphere; calculating the spherical coordinates of each key point on the target sphere according to the plurality of initial arc lengths, the starting coordinate, and the ending coordinate.

[0040] Specifically, as Figure 2 shown, after determining the number of key points, the angle ∠P1OP2 can be divided to obtain a plurality of angles, and the coordinates of each angle on the target sphere are determined as the spherical coordinates of the key points. As Figure 2 shown, the position on the target sphere corresponding to the angle ∠P1OH1 is the spherical position of the key point H1. Thus, the spherical position of each key point on the sphere is determined according to the plurality of first included angle values. However, at this time, the spherical coordinates of each spherical position cannot be determined. The initial arc length corresponding to each first included angle value can be calculated through the first included angle value and the radius of the target sphere. For example, the arc length corresponding to the angle ∠P1OH3 is also the arc length between the positions of point P1 and point H3 on the sphere. Thus, a plurality of initial arc lengths are obtained, and then the spherical coordinates of each key point can be calculated through the initial arc length, the starting coordinate, and the ending coordinate in the Figure 3 coordinate system, that is, the longitude and latitude information on the sphere.

[0041] Optionally, in the method for drawing the indication information provided in the embodiments of the present application, calculating the spherical coordinates of each key point on the target sphere according to multiple initial arc lengths, a starting coordinate, and an ending coordinate includes: calculating the arc length between the starting coordinate and the ending coordinate according to the spherical central angle value and the radius of the target sphere to obtain a target arc length; sequentially dividing each initial arc length by the target arc length to obtain the arc length ratio between each initial arc length and the target arc length, obtaining multiple arc length ratios; and determining the spherical coordinates of each key point on the target sphere according to each arc length ratio, the starting coordinate, and the ending coordinate.

[0042] Specifically, after determining the initial arc length between each key point and the starting coordinate, it is necessary to calculate the target arc length between the starting coordinate and the ending coordinate, sequentially divide each initial arc length by the target arc length to obtain the arc length ratio corresponding to each key point, and determine the spherical coordinates of each key point on the target sphere according to the arc length ratio.

[0043] It should be noted that, as Figure 3 shown, assuming that the intersection points of the rays OH1, OH2,..., OH N and the target sphere are C1, C2,..., C N , respectively, then the length of the arc P1C M can be obtained from the arc length formula L = α·R, where R is the radius of the target sphere and α is the first included angle value, that is: L P1CM = α·R, L P1CM is the arc length between P1 and any key point; the arc length of the arc P1P2 can also be obtained from the arc length formula, denoted as L P1P2 . Dividing both sides of the equation by L P1P2 gives the arc length ratio as: L P1M / L P1P2 = α·R / L P1P2 .

[0044] Furthermore, the subsequent coordinate calculation can be completed by means of the geographic API in an open-source library D3. For example: Given two points P1 and P2, the arc P1P2 is unique and determined, and the arc L P1CM along the direction of the arc P1P2 is unique and determined, and the arc L P1CM occupying a specific ratio of the total arc length is unique and determined, that is, the point C M is unique and determined. The above relationship is represented by the function in the geographic API as: the spherical coordinates of the point C M = d3.geoInterpolate(P1 longitude and latitude coordinates, P2 longitude and latitude coordinates)(arc length ratio). It can be seen from the above formula that in the case of obtaining the starting coordinate, the ending coordinate, and multiple arc length ratios, the spherical coordinates of each key point on the target sphere can be calculated through the above expression.

[0045] Optionally, in the method for drawing indication information provided in the embodiments of the present application, connecting the starting coordinate, the ending coordinate, and multiple projection coordinates according to a preset style to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate includes: obtaining the front view of the target sphere, and obtaining the coordinates of the center point of the front view on the spherical surface of the target sphere to obtain the center coordinates; connecting the center point with the center of the target sphere to obtain a second line segment; sequentially determining the included angle values between the second line segment and the starting line segment, the ending line segment, and multiple first line segments to obtain multiple candidate included angle values; obtaining the points whose candidate included angle values are less than or equal to the preset included angle value to obtain at least one target point, and sequentially connecting the at least one target point according to the preset style to obtain the indication information; in the case where all the candidate included angle values are greater than the preset included angle value, determining the indication information as empty.

[0046] Specifically, since some key points on the target sphere, as well as the starting coordinate and the ending coordinate, may appear on the other side that is not displayed on the target sphere, therefore, when generating the indication information of the current state of the target sphere, key points that cannot be displayed may not be generated, and only the indication information composed of key points that can be displayed is displayed.

[0047] For example, take the center point coordinate information of the current target sphere in the front view, that is, the center coordinates. The center coordinates are longitude and latitude information. From mathematical knowledge, it can be known that if the radian between two points is π / 2, then the included angle between the lines connecting these two points to the center of the sphere is 90°. Therefore, it is possible to determine whether a key point is visible by determining whether the included angle value between each line segment and the second line segment is greater than 90°, and connect the visible key points to obtain the indication information.

[0048] In the process of determining visible points, in order to improve the calculation efficiency, the number of calculations can be further reduced, which is roughly divided into the following four cases:

[0049] It is calculated that both the starting point P1 and the ending point P2 are not visible, then all key points are outside the visible range.

[0050] It is calculated that the starting point P1 is not visible. After finding the first visible key point starting from P1, this key point and the subsequent points are all within the visible range.

[0051] It is calculated that the ending point P2 is not visible. After finding the first invisible key point starting from P1, this key point and the subsequent points are all outside the visible range.

[0052] It is calculated that both the starting point P1 and the ending point P2 are visible, then all key points are within the visible range.

[0053] Optionally, in the method for drawing indication information provided in the embodiments of the present application, determining the coordinates of each key point on the corresponding projection layer according to multiple spherical coordinates to obtain multiple projection coordinates includes: determining the distances between the spherical coordinates of each key point and the starting coordinates to obtain multiple first distances; determining the distances between the spherical coordinates of each key point and the ending coordinates to obtain multiple second distances; calculating the absolute values of the differences between the corresponding first distances and second distances of each spherical coordinate to obtain the absolute value information corresponding to each key point; setting each key point on different projection layers according to the magnitude relationship of the absolute value information of multiple key points, and determining the projection coordinates of each key point on the projection layer.

[0054] Specifically, when determining the projection layer where the key point is located, the projection layer where the key point is located can be determined according to the distances from the starting coordinates and the ending coordinates. At this time, the distances between each key point and the starting coordinates and the distances between the key point and the ending coordinates can be calculated, and the distances between the key point and the starting coordinates and the ending coordinates can be determined by the absolute value of the difference, and the projection layer where the key point is located can be determined by the absolute value of the difference, thereby ensuring the accuracy and visibility of the generation of indication information.

[0055] Optionally, in the method for drawing indication information provided in the embodiments of the present application, setting each key point on different projection layers according to the magnitude relationship of the absolute value information of multiple key points and determining the projection coordinates of each key point on the projection layer includes: sorting the multiple absolute value information from largest to smallest to obtain an absolute value sequence; sequentially setting each key point from low to high on multiple projection layers according to the absolute value sequence, and determining the spherical coordinates of the key point on the target sphere as the projection coordinates, where the absolute value information is negatively correlated with the distance between the projection layer where the key point is located and the target sphere, and key points with the same absolute value information are located on the same projection layer.

[0056] Specifically, when determining the projection layer where the key point is located, the key point located at the center of the starting coordinates and the ending coordinates can be set on the outermost projection layer. That is, if the absolute value of a certain key point is the smallest, it indicates that the key point is farther away from the starting coordinates and the ending coordinates. For example Figure 2 point H3 in Figure 2 then the key point is set on the outermost projection layer, that is

[0057] It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. And although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in a different order than here.

[0058] The embodiment of the present application also provides a drawing device for indication information. It should be noted that the drawing device for indication information in the embodiment of the present application can be used to execute the method for drawing indication information provided by the embodiment of the present application. The following introduces the drawing device for indication information provided by the embodiment of the present application.

[0059] Figure 4 is a schematic diagram of the drawing device for indication information provided by the embodiment of the present application. As Figure 4 shown, the device includes: an acquisition unit 41, a determination unit 42, and a generation unit 43.

[0060] The acquisition unit 41 is used to acquire an instruction for generating indication information of a network attack event generated by the system, parse the instruction for generating indication information, and obtain the starting coordinate, ending coordinate, and precision value of the network attack event on the target sphere.

[0061] Specifically, after the security monitoring system of the security product detects a network attack event, an instruction for generating indication information needs to be generated according to the detected network attack event, and the indication information corresponding to the network attack event is generated through this generation instruction. Among them, the instruction for generating indication information includes the address of the attacker of this network attack event, that is, the starting coordinate, the address of the attacked party, that is, the ending coordinate, and the precision value of the indication information preset by the user. This precision value is used to determine the reference point required when generating the indication information, that is, the key point.

[0062] It should be noted that the target sphere can be a model of the earth. Similar to the earth, there are longitude and latitude information on the target sphere. Both the starting address and the ending address are the longitude and latitude information of the attacker and the attacked party. When the target sphere rotates, the longitude and latitude information of the starting address and the ending address remains unchanged, so it will rotate with the rotation of the target sphere.

[0063] The determination unit 42 is used to determine the number of key points and the number of projection layers required for generating the indication information according to the precision value, and calculate the spherical coordinates of each key point on the target sphere according to the starting coordinate and the ending coordinate, obtaining a plurality of spherical coordinates, where the projection layer is located on the outer layer of the target sphere, and the key points are located on the projection layer.

[0064] Specifically, after obtaining the accuracy value, the number of key points on the indication information and the number of projection layers can be determined according to the accuracy value, and the position of each key point on the target sphere can be determined, so as to determine the generation path of the indication information according to the position information of the key points, thereby ensuring the accurate generation of the indication information.

[0065] The generating unit 43 is configured to determine the coordinates of each key point on the corresponding projection layer according to a plurality of spherical coordinates, obtain a plurality of projection coordinates, and connect the starting coordinates, the ending coordinates and the plurality of projection coordinates according to a preset style to obtain the indication information of the network attack event from the starting coordinates to the ending coordinates.

[0066] Specifically, after determining the spherical coordinates of the key points on the target sphere, it is necessary to determine the projection coordinates of each key point according to the projection layer where the key points are located, so as to connect the starting coordinates, the ending coordinates and the plurality of projection coordinates according to a preset style to obtain the indication information. Among them, the preset style can be changed according to the attack content. For example, when the attack content is A, the preset style can be the style corresponding to A, where the style can include color, shape, etc., so that the corresponding indication information can be sent to the user in a targeted manner, and then the user can more intuitively determine the content of the attack information according to the indication information.

[0067] The indication information drawing device provided by the embodiment of the present application obtains an indication information generation instruction of a network attack event generated by the system through the obtaining unit 41, parses the indication information generation instruction, and obtains the starting coordinates, the ending coordinates and the accuracy value of the network attack event on the target sphere. The determining unit 42 determines the number of key points and the number of projection layers required to generate the indication information according to the accuracy value, and calculates the spherical coordinates of each key point on the target sphere according to the starting coordinates and the ending coordinates, obtaining a plurality of spherical coordinates, where the projection layer is located on the outer layer of the target sphere and the key points are located on the projection layer. The generating unit 43 determines the coordinates of each key point on the corresponding projection layer according to a plurality of spherical coordinates, obtains a plurality of projection coordinates, and connects the starting coordinates, the ending coordinates and the plurality of projection coordinates according to a preset style to obtain the indication information of the network attack event from the starting coordinates to the ending coordinates. This solves the problem in the related art that it is impossible for users to clearly and conveniently determine the network attack path by displaying network attack information through a chart. By determining the position information of the key points between the starting coordinates and the ending coordinates and the number of projection layers, and then displaying the projection coordinates of each key point on the projection layer, and connecting the plurality of projection coordinates with the starting coordinates and the ending coordinates according to a preset style, the indication information located above the sphere is generated. Furthermore, the effect of intuitively displaying the attack information to the user through the indication information under the preset style located above the sphere is achieved.

[0068] Optionally, in the drawing device of the indication information provided in the embodiments of the present application, the determining unit 42 includes: a first obtaining module, configured to obtain a relationship table between accuracy values and the number of key points, and determine the number of key points corresponding to an accuracy value according to the relationship table, where the relationship table includes multiple accuracy values and the number of key points corresponding to each accuracy value; a first determining module, configured to determine the number of projection layers based on the criterion that the upper limit of the number of key points on each projection layer is 2, where the spacing between multiple projection layers is the same.

[0069] Specifically, after determining the accuracy value, the number of key points required to form the indication information under this accuracy value can be determined according to a preset relationship table. Further, in order to ensure the generation of accurate indication information, therefore, the maximum number of key points on each projection layer is two, and the key points need to be symmetrically distributed centered, so as to ensure that the generated indication information is optimal in both appearance and accuracy.

[0070] For example, Figure 2 is a schematic diagram of an optional projection layer style provided in the embodiments of the present application. As Figure 2 shown, in order to clearly display the styles of the key points and the projection layers, Figure 2 the target sphere is rotated so that the starting coordinate and the ending coordinate, point P1 is the starting coordinate, and point P2 is the ending coordinate. When the number of key points is 1, only the key point H3 exists, and at the same time, there is one projection layer a. When the number of key points is 3, the key points H2, H3, and H4 exist, and at the same time, there are two projection layers a and b. When the number of key points is 5, the key points H1, H2, H3, H4, and H5 exist, and at the same time, there are three projection layers a, b, and c. Thus, the number of key points and projection layers can be determined according to the accuracy set by the user, and then the indication information required by the user can be generated.

[0071] Optionally, in the drawing device of the indication information provided in the embodiments of the present application, the determining unit 42 includes: a second determining module, configured to determine the center of the target sphere, connect the center of the sphere with the starting coordinate to obtain a starting line segment, and connect the center of the sphere with the ending coordinate to obtain an ending line segment; a second obtaining module, configured to obtain the included angle value of the included angle formed by the starting line segment and the ending line segment to obtain a center-of-sphere included angle value; a dividing module, configured to divide the center-of-sphere included angle value to obtain a plurality of first included angle values equal to the number of key points, where each first included angle value is the included angle value between each first line segment and the starting line segment, and the first line segment is a line segment obtained by connecting a key point with the center of the sphere; a third determining module, configured to respectively determine the initial arc length between the key point and the starting coordinate according to each first included angle value to obtain a plurality of initial arc lengths, where the initial arc length refers to the arc length of the arc formed by the key point and the starting coordinate on the surface of the target sphere; a first calculating module, configured to calculate the spherical coordinates of each key point on the target sphere according to the plurality of initial arc lengths, the starting coordinate, and the ending coordinate.

[0072] Specifically, as Figure 2 shown, after determining the number of key points, the angle P1OP2 can be divided to obtain multiple angles, and the coordinates of each angle on the target sphere are determined as the spherical coordinates of the key points. For example Figure 2 shown, the position on the target sphere corresponding to the angle P1OH1 is the spherical position of the key point H1. Thus, the spherical positions of each key point on the sphere are determined according to multiple first included angle values. However, at this time, the spherical coordinates of each spherical position cannot be determined. The initial arc length corresponding to each first included angle value can be calculated through the first included angle value and the radius of the target sphere. For example, the arc length corresponding to the angle P1OH3 is also the arc length between the positions of point P1 and point H3 on the sphere, so as to obtain multiple initial arc lengths. Furthermore, the spherical coordinates of each key point can be calculated under the coordinate system of Figure 3 That is, the longitude and latitude information on the sphere.

[0073] Optionally, in the drawing device of the indication information provided in the embodiments of the present application, the first calculation module includes: a first calculation sub-module, configured to calculate the arc length between the starting coordinate and the ending coordinate according to the spherical center included angle value and the radius of the target sphere to obtain the target arc length; a second calculation sub-module, configured to divide each initial arc length by the target arc length in turn to obtain the arc length ratio between each initial arc length and the target arc length, and obtain multiple arc length ratios; a determination sub-module, configured to determine the spherical coordinates of each key point on the target sphere according to each arc length ratio, the starting coordinate and the ending coordinate.

[0074] Specifically, after determining the initial arc length between each key point and the starting coordinate, it is necessary to calculate the target arc length between the starting coordinate and the ending coordinate, divide each initial arc length by the target arc length in turn to obtain the arc length ratio corresponding to each key point, and determine the spherical coordinates of each key point on the target sphere according to the arc length ratio.

[0075] It should be noted that, as Figure 3 shown, assume that the intersections of the rays OH1, OH2,..., OH N and the target sphere are C1, C2,..., C N respectively. Then, the length of the arc P1C M can be obtained from the arc length formula L = α·R, where R is the radius of the target sphere and α is the first included angle value, that is: L P1CM = α·R; the arc length of the arc P1P2 can also be obtained from the arc length formula, denoted as L P1P2 . Dividing both sides of the equation by L P1P2 gives the arc length ratio as: L P1M / L P1P2 = α·R / L P1P2 .

[0076] Further, the subsequent coordinate calculation can be completed by means of the geographic API in an open-source library D3. For example: Given two points P1 and P2, the arc P1P2 is unique and determined, and the arc along the direction of arc P1P2 is L P1CM , the arc L that accounts for a specific ratio of the total arc length P1CM is unique and determined, that is, point C M is unique and determined. The functional representation of the above relationship in the geographic API is: The spherical coordinates of point C M are = d3.geoInterpolate(P1 longitude and latitude coordinates, P2 longitude and latitude coordinates)(arc length ratio). Therefore, the spherical coordinates of each key point on the target sphere can be calculated through the above expression.

[0077] Optionally, in the drawing device for the indication information provided in the embodiment of the present application, the generating unit 43 includes: a third obtaining module, configured to obtain the front view of the target sphere and obtain the coordinates of the center point of the front view on the sphere of the target sphere to obtain the center coordinates; a connecting module, configured to connect the center point with the center of the target sphere to obtain a second line segment; a fourth determining module, configured to sequentially determine the included angle values between the second line segment and the starting line segment, the ending line segment, and multiple first line segments to obtain multiple candidate included angle values; a fourth obtaining module, configured to obtain the points whose candidate included angle values are less than or equal to a preset included angle value to obtain at least one target point, and sequentially connect the at least one target point according to a preset style to obtain the indication information; a fifth determining module, configured to determine the indication information as empty when all the candidate included angle values are greater than the preset included angle value.

[0078] Specifically, since some key points on the target sphere and the starting coordinates and ending coordinates may appear on the other side that is not displayed on the target sphere, when generating the indication information for the current state of the target sphere, the key points that cannot be displayed may not be generated, and only the indication information composed of the key points that can be displayed is displayed.

[0079] For example, take the center point coordinate information of the current target sphere in the front view, that is, the center coordinates. The center coordinates are longitude and latitude information. From mathematical knowledge, it can be known that if the radian between two points is π / 2, then the included angle between the lines connecting these two points to the center of the sphere is 90°. Therefore, it is possible to determine whether a key point is visible by determining whether the included angle value between each line segment and the second line segment is greater than 90°, and connect the visible key points to obtain the indication information.

[0080] In the process of determining visible points, in order to improve the calculation efficiency, the number of calculations can be further reduced, which can be roughly divided into the following four cases:

[0081] It is calculated that both the starting point P1 and the ending point P2 are not visible, then all key points are outside the visible range.

[0082] It is calculated that the starting point P1 is invisible. After finding the first visible key point starting from P1, this key point and the subsequent points are all within the visible range.

[0083] It is calculated that the ending point P2 is invisible. After finding the first invisible key point starting from P1, this key point and the subsequent points are all outside the visible range.

[0084] It is calculated that both the starting point P1 and the ending point P2 are visible, then all key points are within the visible range.

[0085] Optionally, in the indication information drawing device provided in the embodiment of the present application, the generating unit 43 includes: a sixth determining module, configured to determine the distance between the spherical coordinates of each key point and the starting coordinates, to obtain a plurality of first distances; a seventh determining module, configured to determine the distance between the spherical coordinates of each key point and the ending coordinates, to obtain a plurality of second distances; a second calculating module, configured to calculate the absolute value of the difference between the first distance and the second distance corresponding to each spherical coordinate, to obtain the absolute value information corresponding to each key point; an eighth determining module, configured to set each key point on different projection layers according to the magnitude relationship of the absolute value information of a plurality of key points, and determine the projection coordinates of each key point on the projection layer.

[0086] Specifically, when determining the projection layer where the key point is located, the projection layer where the key point is located can be determined according to the distances from the starting coordinates and the ending coordinates. At this time, by calculating the difference between the distance of each key point from the starting coordinates and the distance between the key point and the ending coordinates, the distances of the key point from the starting coordinates and the ending coordinates can be determined, and the projection layer where the key point is located can be determined through the absolute value of this difference, thereby ensuring the accuracy and visibility of the generation of the indication information.

[0087] Optionally, in the indication information drawing device provided in the embodiment of the present application, the eighth determining module includes: a sorting sub-module, configured to sort the plurality of absolute value information from large to small to obtain an absolute value sequence; a setting sub-module, configured to sequentially set each key point from low to high on a plurality of projection layers according to the absolute value sequence, and determine the spherical coordinates of the key point on the target sphere as the projection coordinates, where the absolute value information is negatively correlated with the distance of the projection layer where the key point is located from the target sphere, and key points with the same absolute value information are located on the same projection layer.

[0088] Specifically, when determining the projection layer where the key point is located, the key point located at the center of the starting coordinates and the ending coordinates can be set on the outermost projection layer, that is, if the absolute value of a certain key point is the smallest, it indicates that the key point is farther away from the starting coordinates and the ending coordinates. For example Figure 2For the H3 point in, the key point is set on the outermost projection layer, that is Figure 2 the projection layer a in, so as to determine the projection layer where the key point is located according to the absolute value, project the spherical coordinates into the projection layer, obtain the projection coordinates of the key point in the projection layer, and further generate the indication information according to multiple key points and the starting coordinate and the ending coordinate.

[0089] The above-mentioned indication information drawing device includes a processor and a memory. The above-mentioned acquisition unit 41, determination unit 42, generation unit 43, etc. are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to implement corresponding functions.

[0090] The processor contains a kernel, and the kernel retrieves the corresponding program units from the memory. One or more kernels can be set, and by adjusting the kernel parameters, the problem in the related art that users cannot clearly and conveniently determine the network attack path due to the display of network attack information through charts is solved.

[0091] The memory may include non-permanent memory in computer-readable media, random access memory (RAM) and / or non-volatile memory in the form of, for example, read-only memory (ROM) or flash memory (flash RAM), and the memory includes at least one storage chip.

[0092] An embodiment of the present invention provides a computer-readable storage medium, on which a program is stored, and when the program is executed by a processor, the method for drawing the indication information is implemented.

[0093] An embodiment of the present invention provides a processor, and the processor is used to run a program, wherein when the program runs, the method for drawing the indication information is executed.

[0094] An embodiment of the present invention provides an electronic device, including a processor, a memory, and a program stored on the memory and executable on the processor. When the processor executes the program, the following steps are implemented: obtaining an instruction for generating indication information of a network attack event generated by the system, parsing the instruction for generating indication information to obtain the starting coordinate, ending coordinate, and accuracy value of the network attack event on the target sphere; determining the number of key points and the number of projection layers required for generating the indication information according to the accuracy value, and calculating the spherical coordinates of each key point on the target sphere according to the starting coordinate and the ending coordinate to obtain a plurality of spherical coordinates, wherein the projection layer is located on the outer layer of the target sphere, and the key points are located on the projection layer; determining the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates to obtain a plurality of projection coordinates, and connecting the starting coordinate, the ending coordinate, and the plurality of projection coordinates according to a preset style to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate. The device herein can be a server, a PC, a PAD, a mobile phone, etc.

[0095] The present application also provides a computer program product, which when executed on a data processing device, is adapted to execute a program initialized with the following method steps: obtaining an instruction for generating an indication information of a network attack event generated by the system, parsing the instruction for generating the indication information to obtain a starting coordinate, an ending coordinate and a precision value of the network attack event on a target sphere; determining the number of key points and the number of projection layers required for generating the indication information according to the precision value, and calculating the spherical coordinates of each key point on the target sphere according to the starting coordinate and the ending coordinate to obtain a plurality of spherical coordinates, wherein the projection layer is located on the outer layer of the target sphere and the key points are located on the projection layer; determining the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates to obtain a plurality of projection coordinates, and connecting the starting coordinate, the ending coordinate and the plurality of projection coordinates according to a preset format to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate.

[0096] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0097] The present application is described with reference to the flowcharts and / or block diagrams of methods, apparatuses (systems), and computer program products according to embodiments of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, as well as the combination of flows and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, such that the instructions executed by the processor of the computer or other programmable data processing devices generate means for implementing the functions specified in Figure 1 one or more of the flows Figure 1 or multiple flows and / or blocks

[0098] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, such that the instructions stored in the computer-readable memory generate a manufactured article including instruction means for implementing the functions specified in Figure 1 one or more of the flows Figure 1 or multiple flows and / or blocks

[0099] These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operation steps are executed on the computer or other programmable device to generate a computer-implemented process, and thus the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one process Figure 1 one process or multiple processes and / or blocks Figure 1 steps of the functions specified in one block or multiple blocks.

[0100] In a typical configuration, a computing device includes one or more processors (CPUs), an input / output interface, a network interface, and memory.

[0101] The memory may include non-permanent memory in the form of computer-readable media, random access memory (RAM) and / or non-volatile memory such as read-only memory (ROM) or flash memory (flash RAM). The memory is an example of computer-readable media.

[0102] Computer-readable media includes permanent and non-permanent, removable and non-removable media and can store information by any method or technology. The information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette tapes, magnetic disk storage or other magnetic storage devices, or any other non-transmission media that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transitory media such as modulated data signals and carrier waves.

[0103] It should also be noted that the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, commodity or device comprising a series of elements not only includes those elements, but also includes other elements not expressly listed, or also includes elements inherent to such process, method, commodity or device. Without further limitation, an element defined by the statement "comprising an..." does not exclude the existence of additional identical elements in the process, method, commodity or device comprising the element.

[0104] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, various changes and modifications can be made to the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included within the scope of the claims of the present application.

Claims

1. A method for drawing indication information, characterized in that, Including: Obtain an instruction for generating indication information of a network attack event generated by the system, parse the instruction for generating indication information, and obtain the starting coordinate, ending coordinate, and accuracy value of the network attack event on the target sphere; Determine the number of key points and the number of projection layers required for generating the indication information according to the accuracy value, and calculate the spherical coordinates of each key point on the target sphere based on a plurality of initial arc lengths, the starting coordinate, and the ending coordinate, to obtain a plurality of spherical coordinates, where the projection layer is located on the outer layer of the target sphere, the key points are located on the projection layer, and the initial arc length refers to the arc length of the arc formed by the key point and the starting coordinate on the surface of the target sphere; Determine the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates, obtain a plurality of projection coordinates, and connect the starting coordinate, the ending coordinate, and the plurality of projection coordinates in a preset format to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate.

2. The method according to claim 1, wherein Determining the number of key points and the number of projection layers required for generating the indication information according to the accuracy value includes: Obtain a relationship table between the accuracy value and the number of key points, and determine the number of key points corresponding to the accuracy value according to the relationship table, where the relationship table includes a plurality of accuracy values and the number of key points corresponding to each accuracy value; Determine the number of projection layers based on the criterion that the upper limit of the number of key points on each projection layer is 2, where the spacing between the plurality of projection layers is the same.

3. The method according to claim 1, characterized in that Before calculating the spherical coordinates of each key point on the target sphere based on a plurality of initial arc lengths, the starting coordinate, and the ending coordinate, the method further includes: Determine the center of the target sphere, connect the center of the sphere with the starting coordinate to obtain a starting line segment, and connect the center of the sphere with the ending coordinate to obtain an ending line segment; Obtain the included angle value of the included angle formed by the starting line segment and the ending line segment, to obtain the central included angle value; Divide the central included angle value to obtain a plurality of first included angle values equal to the number of key points, where each first included angle value is the included angle value between each first line segment and the starting line segment, and the first line segment is the line segment obtained by connecting the key point and the center of the sphere; Respectively determine the initial arc length between the key point and the starting coordinate according to each first included angle value, to obtain a plurality of initial arc lengths.

4. The method according to claim 3, wherein Calculating the spherical coordinates of each key point on the target sphere based on the plurality of initial arc lengths, the starting coordinate, and the ending coordinate includes: Calculate the arc length between the starting coordinate and the ending coordinate according to the central included angle value and the radius of the target sphere, to obtain a target arc length; Successively divide each initial arc length by the target arc length to obtain the arc length ratio between each initial arc length and the target arc length, to obtain a plurality of arc length ratios; Determine the spherical coordinates of each key point on the target sphere according to each arc length ratio, the starting coordinate, and the ending coordinate.

5. The method according to claim 3, wherein Connecting the starting coordinate, the ending coordinate, and the multiple projection coordinates in a preset format to obtain the indication information of the network attack event from the starting coordinate to the ending coordinate includes: Obtain the front view of the target sphere, and obtain the coordinates of the center point of the front view on the spherical surface of the target sphere to obtain the center coordinate; Connect the center point to the center of the target sphere to obtain a second line segment; Successively determine the included angle values between the second line segment and the starting line segment, the ending line segment, and multiple first line segments to obtain multiple candidate included angle values; Obtain the points where the candidate included angle values are less than or equal to the preset included angle value to obtain at least one target point, and connect the at least one target point in sequence according to the preset format to obtain the indication information; In the case where all candidate included angle values are greater than the preset included angle value, determine the indication information as empty.

6. The method according to claim 1, wherein Determining the coordinates of each key point on the corresponding projection layer according to the multiple spherical coordinates to obtain multiple projection coordinates includes: Determine the distances between the spherical coordinates of each key point and the starting coordinate to obtain multiple first distances; Determine the distances between the spherical coordinates of each key point and the ending coordinate to obtain multiple second distances; Calculate the absolute value of the difference between the first distance and the second distance corresponding to each spherical coordinate to obtain the absolute value information corresponding to each key point; Set each key point on different projection layers according to the magnitude relationship of the absolute value information of multiple key points, and determine the projection coordinates of each key point on the projection layer.

7. The method according to claim 6, characterized in that Setting each key point on different projection layers according to the magnitude relationship of the absolute value information of multiple key points, and determining the projection coordinates of each key point on the projection layer includes: Sort the multiple absolute value information from large to small to obtain an absolute value sequence; Successively set each key point from low to high on multiple projection layers according to the absolute value sequence, and determine the spherical coordinates of the key point on the target sphere as the projection coordinates, where the absolute value information is negatively correlated with the target distance, the target distance is the distance between the projection layer where the key point is located and the target sphere, and the key points with the same absolute value information are located on the same projection layer.

8. A drawing device for indication information, characterized in that, Includes: An acquisition unit for acquiring an indication information generation instruction generated by the system, parsing the indication information generation instruction, and obtaining the starting coordinate, the ending coordinate, and the accuracy value of the network attack event on the target sphere; A determination unit for determining the number of key points and the number of projection layers required to generate the indication information according to the accuracy value, and calculating the spherical coordinates of each key point on the target sphere according to multiple initial arc lengths, the starting coordinate, and the ending coordinate to obtain multiple spherical coordinates, where the projection layer is located on the outer layer of the target sphere, the key points are located on the projection layer, and the initial arc length is the arc length of the arc formed by the key point and the starting coordinate on the surface of the target sphere; A generating unit, configured to determine the coordinates of each key point on the corresponding projection layer according to the plurality of spherical coordinates, obtain a plurality of projection coordinates, and connect the starting coordinates, the ending coordinates and the plurality of projection coordinates in a preset format to obtain the indication information of the network attack event from the starting coordinates to the ending coordinates.

9. A computer storage medium, characterized in that, The computer storage medium is used for storing a program, wherein when the program runs, it controls the device where the computer storage medium is located to execute the indication information drawing method according to any one of claims 1 to 7.

10. An electronic device, characterized in that, Comprising one or more processors and a memory, the memory is used for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors are caused to implement the indication information drawing method according to any one of claims 1 to 7.

Images