A system and method for assisting rapid construction of a kill chain
By structuring the equipment and using the search matching and update strategy of the "tendering" model, and combining the Swing algorithm to analyze user behavior, the problem of insufficient equipment use in traditional kill chain construction is solved, and efficient and accurate equipment use and the ability to quickly respond to battlefield changes is achieved.
Patent Information
- Application Number
- CN202410135792.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-01-31
- Publication Date
- 2025-05-23
- Estimated Expiration
- 2044-01-31
AI Technical Summary
During the construction of traditional kill chains, commanders and staff members need to have advanced knowledge of equipment in multiple combat domains, and cannot efficiently coordinate the use of equipment in multiple combat domains, resulting in insufficient precision in equipment and difficulty in responding to battlefield changes quickly.
By structuring the equipment, including category hierarchy, function summary, performance parameter sorting, combat purpose description, and establishing a search lexicon for identification characters, the equipment is accurately searched and matched. At the same time, the search matching update strategy and Swing algorithm of the "tender" model are used to analyze user behavior and recommend alternative equipment.
It realizes efficient management and precise application of equipment in multiple combat domains, improves command and decision-making efficiency, can quickly respond to battlefield changes, and build a stable killing network.
Smart Images
Figure CN118036876B_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the technical field of command and control equipment systems, and specifically relates to a system and method for assisting in the rapid construction of a kill chain. Background Art
[0002] At present, the military generally uses the process of discovery, positioning, tracking, aiming, attacking and evaluation to describe the kill chain. The six links of the kill chain can explain the steps of general combat operations and the relationship between these steps and the equipment required. With the continuous expansion of battlefield space, the future form of war will be multi-domain joint and cross-domain operations. In the traditional kill chain construction process, commanders and staff mainly select and use equipment based on their own knowledge and experience, which requires extremely high equipment knowledge of commanders and staff, and this method is not conducive to the efficient and coordinated use of equipment in multiple combat domains. In future wars, the battlefield reaction time will be greatly compressed, and as the war progresses, the kill chain will inevitably change dynamically. This requires that each link of the kill chain must quickly add more nodes to form a robust and resistant kill network through chain aggregation.
[0003] Therefore, there is an urgent need for an efficient equipment management system and method that can quickly obtain the equipment required to build a kill chain from the large number of equipment models in various combat domains, so as to achieve the precise use of equipment in each link of the kill chain. Summary of the invention
[0004] In order to solve the problems in the prior art, on the one hand, the present invention provides a method for assisting in rapid construction of a kill chain, comprising:
[0005] (1) Structural modeling of equipment, including classification of equipment, summary of equipment functions, sorting out performance parameters, sorting out combat uses, and establishing a search term library with identification characters.
[0006] (2) Implementing store-like construction for task units, through real-time dynamic management of the equipment deployment information and equipment quantity of each task unit, clearly displaying the combat capability of each task unit, and forming a digitally managed equipment resource pool and combat capability pool.
[0007] (3) Establishing a supply-demand search matching mechanism based on the user's own needs, wherein the search matching mechanism includes user input, preprocessing, word segmentation, search word expansion and matching recall;
[0008] (4) Setting a sorting mechanism for the search results of the equipment, wherein the result sorting mechanism includes a relevance sorting mechanism and a custom sorting mechanism,
[0009] (5) Establish a search matching update strategy for the "bidding" model,
[0010] (6) Based on the Swing algorithm, the user's access behavior to the system is analyzed and combined with the equipment information in the kill chain management application module to determine and verify the similarity of equipment, and the equipment that can be used as an alternative is recommended to the user.
[0011] Furthermore, the structured modeling of equipment specifically includes:
[0012] Equipment classification level: Classify equipment according to the combat domain and combat purpose.
[0013] Equipment performance parameter sorting: sort out the performance parameters of equipment on the detailed page of equipment search results, so that users can quantitatively understand the combat capability of this type of equipment, and it also serves as a basis for users to accurately screen and sort the results of the same type of equipment;
[0014] Description of equipment combat purpose: Describe its combat purpose on the detailed page of equipment search results, so that users can quickly determine whether the equipment is required for the kill chain construction;
[0015] Establish a search vocabulary with identification characters: Use the name, model, alias, etc. that uniquely identify the equipment as keywords for precise search. At the same time, phrases with a high degree of correlation with the equipment's typical characteristics, main functions, combat purposes, etc. will also be used as keywords for fuzzy search to establish a complete equipment search vocabulary.
[0016] Furthermore, the specific steps for the task unit to implement store construction are:
[0017] The task unit is divided into multiple equipment stores based on its assigned equipment and combat capabilities. Each equipment store clearly displays the deployment information, equipment quantity and combat capabilities of the task unit, and updates the information of its own equipment store in real time based on changes in the task unit's own equipment capabilities.
[0018] Furthermore, establishing a supply and demand search matching mechanism based on the user's own needs specifically includes:
[0019] User input: Users propose search keywords based on their own needs and complete keyword input through the search box.
[0020] Preprocessing: includes two sub-steps: removing useless parts of search terms and correcting search terms.
[0021] Word segmentation: segment the search term text by string matching, word meaning segmentation, and statistical segmentation, and use each segmented word as the smallest granularity unit for the search.
[0022] Search term expansion: Use synonym rewriting, near-synonym rewriting, or intent word rewriting, and then adjust the search term entity weight to further optimize the word segmentation effect, thereby reducing the amount of no results and improving the quality of matching recall.
[0023] Matching recall: Match the user's needs after word segmentation with the equipment's category, function, performance, purpose and other index information, then extract the equipment that meets the requirements and display it to the user to complete the matching recall.
[0024] Furthermore, establishing a supply and demand search matching mechanism based on the user's own needs also includes:
[0025] The fallback strategy when no results are returned during the search and matching process: directly perform fuzzy matching on the pre-processed search terms and the full text of the equipment identification library, and recall all equipment that contains the search terms in all identifications, to ensure that the user's search results can be recalled as much as possible.
[0026] Furthermore, the specific steps of the relevance sorting and custom sorting mechanism are:
[0027] The specific steps of the relevance sorting mechanism are: by setting different weights for the search attribute tags of the equipment, weighted summing up the search attribute tags hit by the search term input by the user, and sorting them from large to small according to the summation results,
[0028] The custom sorting mechanism specifically includes: 1. Sorting according to the performance excellence based on the performance parameters in the inherent attributes of the equipment; 2. Sorting based on the interactive attribute indicators between the user and the equipment, such as the "view volume", "rating" and "conversion rate" of the equipment.
[0029] Furthermore, the search matching update strategy for establishing the "bidding" mode specifically includes:
[0030] If the user returns no results after searching, the "bidding" mode is started, and the system broadcasts the "bidding" demand to all equipment stores.
[0031] Equipment stores that meet the "bidding" requirements can feedback their equipment details to the user end through the "bidding" method.
[0032] If the "bidding" match is successful, the task unit can update and improve the search tag entry of the equipment, so that subsequent users can match the equipment based on keyword search.
[0033] Furthermore, the specific steps for determining and verifying the similarity of equipment are as follows:
[0034] Taking the equipment in each link of the initial kill chain constructed by the user as the base point, the Swing algorithm is used to analyze the user's browsing, clicking, collecting, and adding to the kill chain access system behavior, preliminarily find out the equipment that is similar to the base point equipment, and quantitatively calculate the similarity of the function, performance, and purpose of the required equipment and similar equipment;
[0035] The base equipment is verified based on the user's access system behavior, and through similarity recommendation, the base equipment is obtained as an alternative to the equipment used in each link of the kill chain.
[0036] On the other hand, the present invention provides a system for assisting in the rapid construction of a kill chain, comprising: an equipment information management module, an equipment shop management module, a kill chain management application module, a kill net auxiliary generation module and a user information management module. The user inputs the equipment demand into the kill chain management application module through the user information management module. The kill chain management application module needs to send the equipment demand instruction to the equipment shop management module and the kill net auxiliary generation module. The equipment shop management module matches the equipment with the equipment information management module and then feeds back the matching result to the user information management module. The kill net auxiliary generation module feeds back the replaceable equipment information to the user information management module after judging the equipment similarity. After the user information management module verifies and matches the fed-back replaceable equipment with the equipment in the equipment information management module, the final replaceable equipment is pushed to the kill chain management application module to form a kill net.
[0037] Furthermore, the equipment information management module is used to store and manage the equipment classification, equipment function, performance parameters and combat use information of each equipment, and also stores a search tag word library matching the user.
[0038] The equipment store management module is used to store and manage the equipment information used by the task unit, including the organization series information with hierarchical command relationship, deployment location information, the types and quantities of attached equipment, and the types and quantities of equipment that can provide combat services. The user information management module is used to store various types of information of system users identified by accounts, including account passwords, user permissions, usage records, and user preference analysis paths.
[0039] The kill chain management application module is used to store and manage various types of equipment selected and determined by the user in the process of building the kill chain, including 6 storage management submodules: discovery, positioning, tracking, aiming, engagement and evaluation.
[0040] The kill-net auxiliary generation module determines and verifies equipment similarity based on a combination of user access system behavior and equipment information in the kill-chain management application module, and calculates replaceable equipment information of base point equipment.
[0041] Compared with the prior art, the system and method for assisting the rapid construction of a kill chain provided by the present invention is a digital and intelligent equipment management and recommendation method, specifically, a structured equipment modeling method and a similar equipment intelligent recommendation method, which is of great significance for users to quickly and accurately select equipment in the process of building a kill chain to improve the efficiency of command decision-making. In addition, the weapon management system constructed by the system and method for assisting the rapid construction of a kill chain of the present invention combines the existing equipment library, the equipment owned by each task unit, and the management application of the kill chain, and finally obtains replaceable equipment by searching, matching and verifying. The management method proposed by the present invention also has certain promotion significance in other fields. BRIEF DESCRIPTION OF THE DRAWINGS
[0042] Figure 1 It is a flow chart of a weapon management system quickly constructed based on a kill chain according to the present invention;
[0043] Figure 2 It is a logical relationship diagram of the search and matching mechanism in the present invention;
[0044] Figure 3 It is a schematic diagram of the method for searching, matching and updating based on the "bidding" mechanism of the present invention;
[0045] Figure 4 It is a schematic diagram of a method for determining similar equipment based on user behavior according to the present invention. DETAILED DESCRIPTION
[0046] The present invention is further explained below in conjunction with the drawings and specific embodiments of the specification. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.
[0047] A kind of Figure 1 As shown, an embodiment of the present invention provides a method for assisting in the rapid construction of a kill chain. The system developed based on this method includes five major functional modules: "equipment information management", "equipment store management", "user information management", "kill chain management application" and "kill network auxiliary generation".
[0048] According to an embodiment of the present invention, the equipment information management module adopts the concept of commodity management of the e-commerce platform, and is used to store and manage various types of equipment information, including the categories of equipment under different classification forms, and the search tag word library such as equipment function, performance, combat use, etc. that matches the user's search intention. The equipment store management module adopts the concept of store management of the e-commerce platform, and is used to store and manage the key information of the main task unit, including the compilation series information such as hierarchical command relationship, deployment location information, the types and quantities of attached equipment, and the types and quantities of equipment that can provide combat services. The equipment store management module is used to store various types of information of system users identified by accounts, including specific information such as account passwords, user permissions, and usage records. The user permissions divide users into ordinary users and commander users of different levels. The range of equipment that users with different permissions can obtain and dispatch is different. The usage records mainly refer to the user's browsing, clicking, collecting, adding to the kill chain and other access behaviors of the system, providing basic data for intelligent recommendation of similar equipment; the kill chain management application module adopts the concept of "shopping cart" of the e-commerce platform, and is used to store and manage various types of equipment selected and determined by users in the process of building the kill chain, including "discovery", " There are 6 storage management sub-modules, namely "positioning", "tracking", "aiming", "engagement" and "evaluation". After searching and finding the equipment they need, users can manually add it to the specific link module of the kill chain, and further send the equipment demand to the specific equipment store through the "dispatching" task issuance method. The kill network auxiliary generation module determines and verifies the equipment similarity based on the combination of user access system behavior and equipment content matching, and calculates the replaceable equipment of the base equipment. After the user manually determines the equipment in each link of the initial kill chain, the system automatically recommends the replaceable equipment to the link of the kill chain, expands the scale of the kill chain, and generates a kill network.
[0049] According to an embodiment of the present invention, the user inputs the equipment requirement into the kill chain management application module through the user information management module, and the kill chain management application module needs to send the equipment requirement instruction to the equipment store management module and the kill net auxiliary generation module. The equipment store management module matches the equipment with the equipment information management module and then feeds back the matching result to the user information management module. The kill net auxiliary generation module feeds back the replaceable equipment information to the user information management module after judging the equipment similarity. After the user information management module verifies and matches the fed-back replaceable equipment with the equipment in the equipment information management module, the final replaceable equipment is pushed to the kill chain management application module to form a kill net.
[0050] According to an embodiment of the present invention, equipment structured modeling includes classifying equipment into categories, summarizing typical functions, combing performance parameters, describing combat uses, and further extracting identification characters that users of this type of equipment may use during the kill chain construction process, that is, search terms, and specifically including: Classification of equipment categories: Using the principle of "repeated but not missed", classify equipment according to the combat domain and combat use of the equipment, and further divide it into subcategories; Summarize typical functions of equipment: Summarize its typical functions on the detailed page of equipment search results, so that users can qualitatively understand the combat capability of this type of equipment, and also provide functional reference information for commanders to build kill chains; Sorting out equipment performance parameters: In the equipment search results, the equipment is classified into the following categories: The detailed page sorts out its performance parameters to facilitate users to quantitatively understand the combat capability of this type of equipment, and also provides reference information for commanders and staff to make actuarial and detailed calculations. It also serves as a basis for users to accurately screen and sort the results of the same type of equipment; Description of the combat use of equipment: The combat use of the equipment is described on the detailed page of the equipment search results, so that users can quickly determine whether this type of equipment is required for the construction of the kill chain; Equipment identification character extraction: The "name", "model", "alias" and other unique identifiers of the equipment are used as keywords for precise searches. At the same time, phrases with a high degree of correlation with the typical characteristics, main functions, combat uses, etc. of the equipment are also used as keywords for fuzzy searches, to establish a relatively complete equipment search vocabulary that can basically cover the user's search intent.
[0051] According to the embodiment of the present invention, the equipment structured modeling takes "a certain type of fighter" as an embodiment, and the category hierarchy is divided into "airspace" and "combat strike" categories, and the typical functions are summarized as "air interception / ground attack / electronic warfare / air-to-air, air-to-ground (sea) precision strike", etc. The performance parameters are sorted into "range: xx; speed: xx; bomb load: xx; cost: xx", etc. The combat purpose is described as having the combat capability to compete with advanced fighters equipped with active phased array radars, and can perform rapid air combat, ground strikes, electronic warfare and other combat tasks within a range of xx kilometers. The search identification characters are further extracted as "a certain-xx; a certain xx; fighter; third-generation and a half aircraft; multi-purpose fighter; medium-sized fighter; air control operations; air-to-ground strikes; assault operations; electronic warfare aircraft", etc.
[0052] According to an embodiment of the present invention, Figure 3As shown, the search matching mechanism includes user input, search term preprocessing, word segmentation, search term expansion, matching recall, and a fallback strategy when no results are returned. Specifically, the user input refers to: in the process of building a kill chain, the user defines precise or fuzzy search keywords based on the understanding of his own needs, completes the input of search terms through the search box of the system front-end interface, and creates a "Query"; the preprocessing refers to: including two sub-steps: removing useless parts of search terms and correcting search terms. The former refers to deleting modifiers and special characters in the search terms input by the user that are not related to entity recognition, and search term correction refers to intelligent identification and autonomous correction of incorrect search terms input by the user, and correcting errors by searching the error correction word library or converting pinyin to Chinese characters; the word segmentation refers to: based on the equipment-related knowledge word segmentation word library, the search term text is corrected through string matching, word meaning segmentation, statistical segmentation, and other general word segmentation methods. The word segmentation is performed in this way, and each word after segmentation is used as the smallest granularity unit of the search; the search term expansion refers to: using synonym rewriting, near-synonym rewriting, intention word rewriting and other methods, and then adjusting the search term entity weight to further optimize the word segmentation effect, thereby reducing the amount of no results and improving the quality of matching recall; the matching recall refers to: matching the user's "demand" after word segmentation with the category, function, performance, use and other index information of the equipment, and then extracting the equipment that meets the requirements and displaying it to the user to complete the matching recall; the bottom-up strategy refers to: directly fuzzy matching the pre-processed search term and the full text of the equipment identification library, recalling all equipment containing the search term in all identifications, and ensuring as much as possible that the user's search has results that can be recalled.
[0053] According to an embodiment of the present invention, Figure 4 As shown, the search matching update method based on the "bidding" mode means that when the conventional search matching strategy cannot return the search results, the user can start the search "bidding" mode after a detailed description of his own equipment demand or combat capability demand, and the system will broadcast the "bidding" demand to all equipment stores, and analyze the "bidding" demand at each equipment store, and confirm whether it can provide the required equipment in combination with its own equipment; if the store confirms that it can meet the user's "bidding" demand after analysis, it can feedback the detailed information of its own equipment to the user through "bidding"; if the "bidding" match is successful, the store can update and improve the search tag entry of the equipment, so that subsequent users can match the equipment based on keyword search; in order to improve the operating efficiency of the "bidding" mechanism, the system needs to establish a certain incentive mechanism to reward the store that successfully completes the "bidding" match, which can also drive the exploration and construction of task unit capabilities.
[0054] According to an embodiment of the present invention, the embodiment of the similarity equipment determination method based on user behavior is as follows: when constructing a kill chain, User1-User5 users need equipment with "medium and long-range air defense combat" capabilities. After the system search, the results presented include "equipment A", "equipment B", "equipment C", "equipment D", "equipment E" and other results. User1 visited "equipment A" and "equipment E" in succession, User2 visited "equipment A", "equipment E" and "equipment B" in succession, User3 visited "equipment A" and "equipment D" in succession, User4 visited "equipment A", "equipment E" and "equipment B" in succession, and User5 visited "equipment A" and "equipment C" in succession. After comparing the search results, the user adds "equipment A" to the "engagement" link of the kill chain. Based on the Swing algorithm, it can be preliminarily determined that "equipment E" and "equipment B" may have similarities with the base equipment "equipment A", and it can be preliminarily determined from the comparison of the number of Swing structures that the former has a higher similarity than the latter.
[0055] According to an embodiment of the present invention, the embodiment of the equipment similarity verification method based on content matching is as follows: Taking "equipment A" as the base equipment, by comparing it with the structured data of "equipment E", it is preliminarily calculated that the similarity distance between "equipment E" and "equipment A" in terms of "medium and long-range air defense combat" capability is 0.77, which is greater than the similarity distance between "equipment B" and "equipment A", further confirming that in terms of "medium and long-range air defense combat" capability, "equipment E" can be used as a similar replaceable equipment of "equipment A". Based on the similarity determination result, the system can automatically add "equipment E" to the "engagement" link of the kill chain constructed by the user, and can add more similar equipment to the kill chain link by setting the kill net scale, thereby generating a kill net of a certain scale.
[0056] A person of ordinary skill in the art can understand that all or part of the steps of implementing the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk, etc., various media that can store program codes.
[0057] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.
Claims
1. A method for assisting rapid construction of a kill chain, characterized in that: include: (1) Structural modeling of equipment, including classification of equipment, summary of equipment functions, sorting out performance parameters, sorting out combat uses, and establishing a search term library with identification characters. Structural modeling of equipment specifically includes: Equipment classification level: Classify equipment according to the combat domain and combat purpose to which it belongs. Equipment performance parameter sorting: sort out the performance parameters of equipment on the detailed page of equipment search results, so that users can quantitatively understand the combat capability of this type of equipment, and it also serves as a basis for users to accurately screen and sort the results of the same type of equipment; Equipment combat purpose description: The combat purpose of the equipment is described on the detailed page of the equipment search result, so that users can quickly determine whether the equipment is required for the kill chain construction; Establishment of a search word library with identification characters: Use the name, model, alias, etc. that uniquely identify the equipment as the keywords for precise search, and also use phrases with a high degree of correlation with the typical characteristics, main functions, combat purposes, etc. of the equipment as the keywords for fuzzy search, to establish a complete equipment search word library. (2) Implementing store-like construction for task units, through real-time dynamic management of the equipment deployment information and equipment quantity of each task unit, clearly displaying the combat capability of each task unit, and forming a digitally managed equipment resource pool and combat capability pool. The specific steps for the task unit to implement store construction are: Mission units are divided into multiple equipment stores based on their assigned equipment and combat capabilities. Each equipment store clearly displays the deployment information, equipment quantity and combat capabilities of the mission unit, and updates the information of its own equipment store in real time in combination with changes in the mission unit's own equipment capabilities. (3) Establishing a supply-demand search matching mechanism based on the user's own needs, wherein the search matching mechanism includes user input, preprocessing, word segmentation, search word expansion and matching recall; (4) Setting a sorting mechanism for the search results of the equipment, wherein the result sorting mechanism includes a relevance sorting mechanism and a custom sorting mechanism, (5) Establish a search matching update strategy for the "bidding" model, including: If the user returns no results after searching, the "bidding" mode is started, and the system broadcasts the "bidding" demand to all equipment stores. Equipment stores that meet the "bidding" requirements can feedback their equipment details to the user end through the "bidding" method. If the "bidding" match is successful, the task unit can update and improve the search tag entry of the equipment, so that subsequent users can match the equipment based on keyword search; (6) Based on the Swing algorithm, the user's access behavior and the equipment in the kill chain management application module are combined to determine and verify the similarity of equipment, and the equipment that can be used as an alternative is recommended to the user. The kill chain management application module is used to store and manage various types of equipment selected and determined by the user in the process of building the kill chain, and it is necessary to send equipment demand instructions to the equipment store management module and the kill network auxiliary generation module.
2. The method for assisting in rapid construction of a kill chain according to claim 1, characterized in that: Establishing a supply and demand search matching mechanism based on user needs specifically includes: User input: Users propose search keywords based on their own needs and complete keyword input through the search box. Preprocessing: includes two sub-steps: removing useless parts of search terms and correcting search terms. Word segmentation: segment the search term text by string matching, word meaning segmentation, and statistical segmentation, and use each segmented word as the smallest granularity unit for the search. Search term expansion: Use synonym rewriting, near-synonym rewriting, or intent word rewriting, and then adjust the search term entity weight to optimize the word segmentation effect, thereby reducing the amount of no results and improving the quality of matching recall. Matching recall: Match the user's needs after word segmentation with the equipment's category, function, performance, purpose and other index information, then extract the equipment that meets the requirements and display it to the user to complete the matching recall.
3. The method for assisting in rapid construction of a kill chain according to claim 1, characterized in that: Establishing a supply and demand search matching mechanism based on user needs also includes: The fallback strategy when no results are returned during the search and matching process: directly perform fuzzy matching on the pre-processed search terms and the equipment identification library, and recall all equipment that contain the search terms in all identifications, to ensure that the user's search results can be recalled as much as possible.
4. The method for assisting in rapid construction of a kill chain according to claim 1, characterized in that: The specific steps of the relevance sorting and custom sorting mechanism are: The specific steps of the relevance sorting mechanism are: by setting different weights for the search attribute tags of the equipment, weighted summing up the search attribute tags hit by the search term input by the user, and sorting them from large to small according to the summation results, The custom sorting mechanism specifically includes:
1. Sorting by performance based on performance parameters in the inherent attributes of the equipment; 2. Sorting based on user-equipment interaction attribute indicators such as the "view volume", "rating", and "conversion rate" of the equipment.
5. The method for assisting in rapid construction of a kill chain according to claim 1, characterized in that: The specific steps for determining and verifying equipment similarity are as follows: Taking the equipment in each link of the initial kill chain constructed by the user as the base point, the Swing algorithm is used to analyze the user's browsing, clicking, collecting, and adding to the kill chain access system behavior, preliminarily find out the equipment that is similar to the base point equipment, and quantitatively calculate the similarity of the function, performance, and purpose of the required equipment and similar equipment; The base equipment is verified based on the user's access system behavior, and through similarity recommendation, the base equipment is obtained as an alternative to the equipment used in each link of the kill chain.
6. A system for assisting in the rapid construction of a kill chain, characterized in that: The method for rapidly constructing an auxiliary kill chain according to any one of claims 1 to 5 comprises: an equipment information management module, an equipment store management module, a kill chain management application module, a kill net auxiliary generation module and a user information management module, The user inputs the equipment requirement into the kill chain management application module through the user information management module, and the kill chain management application module needs to send the equipment requirement instruction to the equipment store management module and the kill net auxiliary generation module. The equipment store management module matches the equipment with the equipment information management module and then feeds back the matching result to the user information management module. The kill net auxiliary generation module feeds back the replaceable equipment information to the user information management module after judging the equipment similarity. After the user information management module verifies and matches the fed-back replaceable equipment with the equipment in the equipment information management module, the final replaceable equipment is pushed to the kill chain management application module to form a kill net.
7. The system for assisting rapid construction of a kill chain according to claim 6, characterized in that: The equipment information management module is used to store and manage the equipment classification, equipment function, performance parameters and combat use information of each equipment, and also stores the search tag word library matching the user. The equipment store management module is used to store and manage the equipment information used by the task unit, including the organization series information with hierarchical command relationship, deployment location information, the types and quantities of attached equipment, and the types and quantities of equipment that can provide combat services. The user information management module is used to store various information of system users identified by their accounts, including account passwords, user permissions, usage records, and user preference analysis paths. The kill chain management application module is used to store and manage various types of equipment selected and determined by the user in the process of building the kill chain, including 6 storage management submodules: discovery, positioning, tracking, aiming, engagement and evaluation. The kill-net auxiliary generation module determines and verifies equipment similarity based on a combination of user access system behavior and equipment information in the kill-chain management application module, and calculates replaceable equipment information of base point equipment.