Network attack behavior analysis control method

Abstract

The invention provides a network attack behavior analysis control method. The method comprises the following steps: S1, logging in a network analysis attack platform; and S2, after logging in the network analysis attack platform, carrying out visual display. According to the method, correct values and error values of different degrees can be displayed for visual coloring.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and in particular to a network attack behavior analysis and control method. Background Art

[0002] At present, big data is being used more and more widely, and with the rapid development of the Internet, most files are stored in the form of data in personal mobile phones or personal computers. In the prior art, for the security of data, data is often uploaded to the cloud for storage. However, after the data is transmitted to the cloud for storage, the security of the data during uploading to the cloud and the security of storage in the cloud cannot be guaranteed. Furthermore, when a third-party server uses the data, the security of the data is also threatened. Patent application number 2023117592890, entitled "A Visual Display Method and System for Smart Petrochemical Production", discloses the following: loading multiple petrochemical product production lines and performing secondary clustering to generate several groups of petrochemical product production lines; outlier production line analysis to extract the first outlier production line; activating the server and the equipment status sensor array to generate the first outlier state; activating the server, building the first petrochemical plant workshop digital twin model, matching the normal rendering color for the non-outlier production line; visual display and rendering. The invention only matches the normal rendering color for the non-outlier production line, and does not provide specific implementation means. Summary of the invention

[0003] The present invention aims to at least solve the technical problems existing in the prior art, and in particular innovatively proposes a network attack behavior analysis and control method.

[0004] In order to achieve the above-mentioned object of the present invention, the present invention provides a network attack behavior analysis and control method, comprising the following steps:

[0005] S1, log in to the network analysis attack platform;

[0006] S2, after logging into the network analysis and attack platform, visualizes the display.

[0007] In a preferred embodiment of the present invention, before step S1, the method further includes performing a network attack using one or any combination of a denial of service attack, a man-in-the-middle attack, a password intrusion, and a node attack.

[0008] In a preferred embodiment of the present invention, step S2 includes the following steps:

[0009] S21, obtaining an error value and a total amount of received screenshot security data;

[0010] S22, obtaining an error rate and a correct rate according to the obtained error value and the total amount of received screenshot safety data;

[0011] S23, obtaining a pie template, and dividing the pie into Totalinformationquantity portions, where Totalinformationquantity represents the total amount of received screenshot security data;

[0012] S24, taking consecutive Rightinformationquantity portions as the correct portion, where Rightinformationquantity represents the correct value obtained by analyzing the uploaded screenshot data; coloring the pie corresponding to the correct portion; and marking the correctness rate on the pie corresponding to the correct portion;

[0013] Alternatively, take consecutive Rightinformationquantity portions as the correct share, where Rightinformationquantity represents the correct value obtained by analyzing the uploaded screenshot data; color the pie corresponding to the correct share; and mark the correct value on the pie corresponding to the correct share;

[0014] S25, coloring the remaining shares and marking the error rate on the pie corresponding to the remaining shares, or coloring the remaining shares and marking the error value on the pie corresponding to the remaining shares.

[0015] In a preferred embodiment of the present invention, the error rate is calculated in step S22 as follows:

[0016] Errorinformationrate=Errorinformationquantity / Totalinformationquantity*100%,

[0017] Errorinformationrate indicates the error rate;

[0018] Errorinformationquantity represents the error value obtained by analyzing the uploaded screenshot data;

[0019] Totalinformationquantity indicates the total amount of screenshot security data received.

[0020] In a preferred embodiment of the present invention, the calculation method of the accuracy in step S22 is:

[0021] Rightinformationrate=Rightinformationquantity / Totalinformationquantity*100%,

[0022] Rightinformationrate indicates the correctness rate;

[0023] Rightinformationquantity represents the correct value obtained based on analyzing the uploaded screenshot data;

[0024] Totalinformationquantity indicates the total amount of screenshot security data received;

[0025] Rightinformationrate+Errorinformationrate=100%,

[0026] Among them, Rightinformationrate represents the correct rate;

[0027] Errorinformationrate indicates the error rate.

[0028] In a preferred embodiment of the present invention, the method for calculating the total amount of screenshot security data in step S21 is:

[0029] Totalinformationquantity=Errorinformationquantity+Rightinformationquantity,

[0030] Among them, Totalinformationquantity represents the total amount of screenshot security data received;

[0031] Errorinformationquantity represents the error value obtained by analyzing the uploaded screenshot data;

[0032] Rightinformationquantity indicates the correct value obtained by analyzing the uploaded screenshot data.

[0033] In a preferred embodiment of the present invention, the method for coloring the correct share in step S24 is:

[0034]

[0035] Among them, R represents the red value;

[0036] G represents the green value;

[0037] B represents the blue value;

[0038] Rightinformationrate indicates the correctness rate;

[0039] G0 represents the preset green color value;

[0040] Indicates rounding down.

[0041] In a preferred embodiment of the present invention, the method for coloring the error share in step S25 is:

[0042]

[0043] Among them, R represents the red value;

[0044] G represents the green value;

[0045] B represents the blue value;

[0046] Errorinformationrate indicates the error rate;

[0047] R0 represents the preset red color value;

[0048] Indicates rounding down.

[0049] In summary, due to the adoption of the above technical solution, the present invention can visualize and colorize to show different degrees of correct values / correct rates and error values / error rates.

[0050] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0052] Figure 1 It is a schematic block diagram of the process of the present invention. DETAILED DESCRIPTION

[0053] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and cannot be understood as limiting the present invention.

[0054] The present invention provides a network attack behavior analysis and control method, such as Figure 1 As shown, the following steps are included:

[0055] S1, log in to the network analysis attack platform;

[0056] S2, after logging into the network analysis and attack platform, visualizes the display.

[0057] In a preferred embodiment of the present invention, before step S1, it also includes using one or any combination of denial of service attack, man-in-the-middle attack, password intrusion, node attack to carry out a network attack on the analysis attack platform and / or the smart phone.

[0058] In a preferred embodiment of the present invention, step S2 includes the following steps:

[0059] S21, obtaining an error value and a total amount of received screenshot security data;

[0060] S22, obtaining an error rate and a correct rate according to the obtained error value and the total amount of received screenshot safety data;

[0061] S23, obtaining a pie template, and dividing the pie into Totalinformationquantity portions, where Totalinformationquantity represents the total amount of received screenshot security data;

[0062] S24, taking consecutive Rightinformationquantity portions as the correct portion, where Rightinformationquantity represents the correct value obtained by analyzing the uploaded screenshot data; coloring the pie corresponding to the correct portion; and marking the correctness rate on the pie corresponding to the correct portion;

[0063] S25, coloring the remaining shares and marking the error rate on the pie corresponding to the remaining shares.

[0064] In a preferred embodiment of the present invention, the error rate is calculated in step S22 as follows:

[0065] Errorinformationrate=Errorinformationquantity / Totalinformationquantity*100%,

[0066] Errorinformationrate indicates the error rate;

[0067] Errorinformationquantity represents the error value obtained by analyzing the uploaded screenshot data;

[0068] Totalinformationquantity indicates the total amount of screenshot security data received.

[0069] In a preferred embodiment of the present invention, the calculation method of the accuracy in step S22 is:

[0070] Rightinformationrate=Rightinformationquantity / Totalinformationquantity*100%,

[0071] Rightinformationrate indicates the correctness rate;

[0072] Rightinformationquantity represents the correct value obtained based on analyzing the uploaded screenshot data;

[0073] Totalinformationquantity indicates the total amount of screenshot security data received;

[0074] Rightinformationrate+Errorinformationrate=100%,

[0075] Among them, Rightinformationrate represents the correct rate;

[0076] Errorinformationrate indicates the error rate.

[0077] In a preferred embodiment of the present invention, the method for calculating the total amount of screenshot security data in step S21 is:

[0078] Totalinformationquantity=Errorinformationquantity+Rightinformationquantity,

[0079] Among them, Totalinformationquantity represents the total amount of screenshot security data received;

[0080] Errorinformationquantity represents the error value obtained by analyzing the uploaded screenshot data;

[0081] Rightinformationquantity indicates the correct value obtained by analyzing the uploaded screenshot data.

[0082] In a preferred embodiment of the present invention, the method for coloring the correct share in step S24 is:

[0083]

[0084] Among them, R represents the red value;

[0085] G represents the green value;

[0086] B represents the blue value;

[0087] Rightinformationrate indicates the correctness rate;

[0088] G0 represents the preset green color value; the default is 255 for 8 bits, 65535 for 16 bits, and can also be 9 bits or 10 bits.

[0089] Indicates rounding down.

[0090] In a preferred embodiment of the present invention, the method for coloring the error share in step S25 is:

[0091]

[0092] Among them, R represents the red value;

[0093] G represents the green value;

[0094] B represents the blue value;

[0095] Errorinformationrate indicates the error rate;

[0096] R0 represents the preset red color value; the default is 255 for 8 bits, 65535 for 16 bits, and can also be 9 bits or 10 bits.

[0097] Indicates rounding down.

[0098] In a preferred embodiment of the present invention, step S1 includes the following steps:

[0099] S11, obtain the mobile phone serial number and mobile phone number; the mobile phone serial number is a 15-digit string of one of the numbers 0 to 9 or any combination; the mobile phone number is a 11-digit string of one of the numbers 0 to 9 or any combination;

[0100] S12, treating the mobile phone serial number and the mobile phone number as decimal mobile phone serial number and mobile phone number, converting the mobile phone serial number and mobile phone number into sixty-binary mobile phone serial number and mobile phone number; connecting the converted mobile phone serial number and mobile phone number and sending them to the network analysis attack platform;

[0101] S13, after receiving the connected mobile phone serial number and mobile phone number, the network analysis attack platform restores the connected mobile phone serial number and mobile phone number to obtain the platform mobile phone serial number and platform mobile phone number;

[0102] S14, generate a platform number based on the platform mobile phone serial number and the platform mobile phone number, and determine whether the platform number exists in the network analysis attack platform:

[0103] If the platform number exists in the network analysis attack platform, the login to the network analysis attack platform is successful;

[0104] If the platform number does not exist in the network analysis attack platform, the login to the network analysis attack platform fails. Through the above login method, you do not need an account and password to log in, you only need to automatically obtain the mobile phone serial number and mobile phone number to log in, ensuring the security of the mobile phone serial number and mobile phone number to prevent leakage.

[0105] In a preferred embodiment of the present invention, the method for connecting the converted mobile phone serial number and the mobile phone number in step S12 is:

[0106] Phonestring=IMEInumber 62 -Phonenumber 62 ,

[0107] Among them, Phonestring represents the mobile phone serial number and mobile phone number after connection;

[0108] IMEInumber 62 Indicates the converted mobile phone serial number;

[0109] Phone number 62 Indicates the converted mobile phone number;

[0110] - indicates a connector.

[0111] In a preferred embodiment of the present invention, in step S13, the method of restoring the connected mobile phone serial number and mobile phone number to obtain the platform mobile phone serial number and platform mobile phone number is:

[0112] Phonestring′=IMEInumber′ 1←7 Phone number 6←1 ,

[0113] Among them, Phonestring′ represents the received mobile phone serial number and mobile phone number of the connection;

[0114] Phone number 6←1 Indicates that the sixth to the first last digit of the received mobile phone serial number and mobile phone number is the platform mobile phone number;

[0115] IMEI number ′ 1←7 Indicates that the first to the last 7 digits of the received mobile phone serial number and mobile phone number are the platform mobile phone serial number.

[0116] In a preferred embodiment of the present invention, the method for generating a platform number according to the platform mobile phone serial number and the platform mobile phone number in step S14 includes the following steps:

[0117] S141, converting the platform mobile phone serial number and the platform mobile phone number into a hexadecimal mobile phone serial number and mobile phone number, and connecting the converted platform mobile phone serial number and the platform mobile phone number to obtain a platform connection number;

[0118] S142, using the platform number generation method to obtain the platform number using the platform connection number.

[0119] In a preferred embodiment of the present invention, after connecting the converted platform mobile phone serial number and the platform mobile phone number in step S141, the method for obtaining the platform connection number is:

[0120] Phonestring″=IMEInumber 16 -Phonenumber 16 ,

[0121] Among them, Phonestring″ represents the platform connection number obtained by connecting the converted platform mobile phone serial number and the platform mobile phone number;

[0122] IMEInumber 16 Indicates the converted platform mobile phone serial number;

[0123] Phone number 16 Indicates the converted platform mobile phone number;

[0124] - indicates a connector.

[0125] In a preferred embodiment of the present invention, in step S142, the method of obtaining the platform number by using the platform number generation method from the platform connection number is as follows:

[0126] Platformnumber=Platformnumbercalculateformula(Phonestring″),

[0127] Wherein, Platformnumber indicates the platform number;

[0128] Platformnumbercalculateformula() represents the platform number calculation method; SHA224 is preferably used;

[0129] Phonestring″ indicates the platform connection number.

[0130] For example, assuming that the SIM card number of a smartphone is 465898188666620 and the phone number is 13333333333, the platform number stored in the network analysis attack platform is 4522063593862D32D495C51C705429F4D658BC6C0CFFCA749E41BE50.

[0131] The first step is to obtain the mobile phone serial number 465898188666620 and mobile phone number 133333333333.

[0132] The second step is to convert the mobile phone serial number 465898188666620 and the mobile phone number 13333333333 into the sixty-binary mobile phone serial number 28IOjHyLk and the mobile phone number EYLJ5R; connect the converted mobile phone serial number 28IOjHyLk and the mobile phone number EYLJ5R to 28IOjHyLkEYLJ5R, and send 28IOjHyLkEYLJ5R to the network analysis attack platform.

[0133] The third step is that after the network analysis attack platform receives the connected mobile phone serial number and mobile phone number 28IOjHyLkEYLJ5R, it restores the connected mobile phone serial number and mobile phone number 28IOjHyLkEYLJ5R to obtain the platform mobile phone serial number 28IOjHyLk and platform mobile phone number EYLJ5R.

[0134] The fourth step is to convert the platform mobile phone serial number 28IOjHyLk and the platform mobile phone number EYLJ5R into the hexadecimal mobile phone serial number 1A7BB600976FC and the mobile phone number 31ABA8555, and then connect the converted platform mobile phone serial number 1A7BB600976FC and the platform mobile phone number 31ABA8555 to obtain the platform connection number 1A7BB600976FC31ABA8555.

[0135] Step 5. Use the platform number generation method to obtain the platform number 4522063593862D32D495C51C705429F4D658BC6C0CFFCA749E41BE50 from the platform connection number 1A7BB600976FC31ABA8555.

[0136] Step 6. Since the platform number 4522063593862D32D495C51C705429F4D658BC6C0CFFCA749E41BE50 is consistent with the platform number 4522063593862D32D495C51C705429F4D658BC6C0CFFCA749E41BE50 stored in the network analysis attack platform, the login to the network analysis attack platform is successful.

[0137] Assuming the smartphone's SIM card number is 465898188666620 and the phone number is 13333333333, the registration includes the following steps:

[0138] The first step is to obtain the mobile phone serial number 465898188666620 and mobile phone number 133333333333.

[0139] The second step is to convert the mobile phone serial number 465898188666620 and the mobile phone number 13333333333 into the sixty-binary mobile phone serial number 28IOjHyLk and the mobile phone number EYLJ5R; connect the converted mobile phone serial number 28IOjHyLk and the mobile phone number EYLJ5R to 28IOjHyLkEYLJ5R, and send 28IOjHyLkEYLJ5R to the network analysis attack platform.

[0140] The third step is that after the network analysis attack platform receives the connected mobile phone serial number and mobile phone number 28IOjHyLkEYLJ5R, it restores the connected mobile phone serial number and mobile phone number 28IOjHyLkEYLJ5R to obtain the platform mobile phone serial number 28IOjHyLk and platform mobile phone number EYLJ5R.

[0141] The fourth step is to convert the platform mobile phone serial number 28IOjHyLk and the platform mobile phone number EYLJ5R into the hexadecimal mobile phone serial number 1A7BB600976FC and the mobile phone number 31ABA8555, and then connect the converted platform mobile phone serial number 1A7BB600976FC and the platform mobile phone number 31ABA8555 to obtain the platform connection number 1A7BB600976FC31ABA8555.

[0142] Step 5. Use the platform number generation method to obtain the platform number 4522063593862D32D495C51C705429F4D658BC6C0CFFCA749E41BE50 from the platform connection number 1A7BB600976FC31ABA8555.

[0143] Step 6. Store the platform number 4522063593862D32D495C51C705429F4D658BC6C0CFFCA749E41BE50 in the network analysis and attack platform for subsequent use.

[0144] The uppercase letters A to Z correspond to values ​​10 to 35 respectively, and the lowercase letters a to z correspond to values ​​36 to 61 respectively.

[0145] The following steps are included on the smartphone side:

[0146] S3-1, obtaining screenshot data;

[0147] S3-2, generating screenshot security data using the screenshot code from the acquired screenshot data;

[0148] S3-3, the screenshot security data is transmitted to the network analysis attack platform via the wireless network; it should be noted that the screenshot security data can be transmitted to the network analysis attack platform via the wireless network, and the same screenshot security data can also be transmitted to the network receiving platform via the wireless network. The network analysis attack platform and the network receiving platform are two independent platforms.

[0149] The network analysis attack platform includes the following steps:

[0150] S3-4, after receiving the screenshot security data, the network analysis attack platform analyzes the screenshot security data.

[0151] In a preferred embodiment of the present invention, the format of the screenshot data is one of PNG, JPG, JPEG, BMP or any combination thereof.

[0152] In a preferred embodiment of the present invention, in step S3-1, the screenshot data is screenshot data of a smart phone.

[0153] In a preferred embodiment of the present invention, in step S3-3, the wireless network is one of WiFi, 5G, 4G, and 3G wireless networks.

[0154] In a preferred embodiment of the present invention, the method for generating screenshot security data in step S3-2 includes the following steps:

[0155] S3-21, obtain the depth of the screenshot data, recorded as M;

[0156] S3-22, converting the pixel value of each pixel in the screenshot data into binary and converting the screenshot code into binary;

[0157] S3-23, converting the binary pixel value of each pixel in the screenshot data into a number of M bits;

[0158] S3-24, obtaining the first digit of the screenshot code, recorded as N; converting the first digit N into the number of digits M;

[0159] S3-25, performing an operation on the converted pixel value and the converted M-bit value N to obtain screenshot security data;

[0160] S3-26, transmits the screenshot security data and the screenshot code to the network analysis attack platform via the wireless network.

[0161] In a preferred embodiment of the present invention, the method for converting the binary pixel value of each pixel in the screenshot data into a number of bits M in step S3-23 is:

[0162] If the number of bits of the binary pixel value of the pixel in the screenshot data is not equal to M, then add 0 in front of the binary pixel value to make the number of bits of the binary pixel value of all pixels in the screenshot data equal to M.

[0163] In a preferred embodiment of the present invention, the method for converting a single-digit value N into a number of digits M in step S3-24 is:

[0164] Add 1 in front of N so that the number of digits after adding 1 is equal to M; that is, the M-digit value N is obtained;

[0165] Or add 1 after N so that the number of digits of the value after adding 1 is equal to M, that is, the M-digit value N is obtained.

[0166] In a preferred embodiment of the present invention, the method for obtaining the screenshot security data in step S3-25 is:

[0167]

[0168] Among them, R x,y,j Indicates the value of the red pixel at the pixel point (x, y) of the screenshot data at the jth position; j = 1, 2, 3, ..., M;

[0169] R′ x,y,j Indicates the value of the red pixel at the pixel point (x, y) of the screenshot security data at the jth position;

[0170] M j It means the value of the jth digit after converting a single-digit value N to a digit M;

[0171] & means and;

[0172] or means or;

[0173]

[0174] Among them, G x,y,j Indicates the value of the green pixel value at the pixel point (x, y) of the screenshot data at the jth position; j = 1, 2, 3, ..., M;

[0175] G′ x,y,j Indicates the value of the green pixel value at the pixel point (x, y) of the screenshot security data at the jth position;

[0176] M j It means the value of the jth digit after converting a single-digit value N to a digit M;

[0177] & means and;

[0178] or means or;

[0179]

[0180] Among them, R x,y,j Indicates the value of the blue pixel value at the pixel point (x, y) of the screenshot data at the jth position; j = 1, 2, 3, ..., M;

[0181] R′ x,y,j Indicates the blue pixel value of the screenshot security data at the pixel point (x, y) is located at the jth position;

[0182] M j It means the value of the jth digit after converting a single-digit value N to a digit M;

[0183] & means and;

[0184] or means or.

[0185] In a preferred embodiment of the present invention, the screenshot code is obtained in step S3-2 as follows:

[0186] Screenshotdata=Screenshotdatacalculateformula(Screenshotimage),

[0187] Among them, Screenshotdata represents the screenshot code;

[0188] Screenshotdatacalculateformula() represents the calculation method of the screenshot code; SHA224 is preferably used;

[0189] Screenshotimage represents screenshot data.

[0190] For example, if the screenshot data is a 1080×1920 8-bit PNG image, its corresponding screenshot code is 96B53D57F00E578698AF448F841028FDCBE20D7CDD8007F5ECD6EFF9 (binary code is 10010110101101010011110101010101111110000000011100101011110000110100110001010111101000100100011111000010000010000010000 0010100011111101110010111110001000001101011111001101101100000000000011111110101111010010101101110111111111001), the pixel value at the pixel point (1050,1911) is (255,11,98), the pixel value at the pixel point (78,1919) is (88,40,198), and the pixel value at the pixel point (554,1243) is (155,111,18).

[0191] The first step is to obtain the depth of the screenshot data, recorded as M = 8;

[0192] The second step is to convert the pixel value (255, 11, 98) of each pixel in the screenshot data (taking the pixel (1050, 1911) as an example) into binary (11111111, 1011, 1100010) and the screenshot code (96B53D57F00E578698AF448F841028FDCBE20D7CDD8007F5ECD6EFF9) into binary (1001011010110101001111010101011111100 0000001110010101111000011010011000101010111101000100100011111000010000010000001010001111110111001011111000100000110101111100110110000000000011111110101111011001);

[0193] The third step is to convert the binary pixel value (11111111, 1011, 1100010) of each pixel in the screenshot data (taking the pixel (1050, 1911) as an example) into a pixel value with 8 bits (111111111, 00001011, 01100010);

[0194] Step 4: Get the first digit of the screenshot code, recorded as N=1; convert the digit 1 to 8, that is, 11111111;

[0195] The fifth step is to calculate the converted pixel value (11111111, 00001011, 01100010) and the converted 8-bit value 11111111 to obtain the screenshot security data (taking the pixel point (1050, 1911) as an example, the pixel value of this point is (00000000, 11110100, 10011101)); the binary pixel value can also be written as decimal (0, 244, 157) or hexadecimal (0, F4, 9D).

[0196] Alternatively, in the first step, the number of bits of depth of the screenshot data is obtained, which is recorded as M=8;

[0197] The second step is to convert the pixel value (88, 40, 198) of each pixel in the screenshot data (taking the pixel (78, 1919) as an example) into binary (1011000, 101000, 11000110) and the screenshot code (96B53D57F00E578698AF448F841028FDCBE20D7CDD8007F5ECD6EFF9) into binary (1001011010110101001111010101011111100 0000001110010101111000011010011000101010111101000100100011111000010000010000001010001111110111001011111000100000110101111100110110000000000011111110101111011001);

[0198] The third step is to convert the binary pixel value (1011000, 101000, 11000110) of each pixel in the screenshot data (taking the pixel (78, 1919) as an example) into a pixel value with 8 bits (01011000, 00101000, 11000110);

[0199] Step 4: Get the first digit of the screenshot code, recorded as N=1; convert the digit 1 to 8, that is, 11111111;

[0200] The fifth step is to calculate the converted pixel value (01011000, 00101000, 11000110) and the converted 8-bit value 11111111 to obtain the screenshot security data (taking the pixel point (78, 1919) as an example, the pixel value of this point is (10100111, 11010111, 00111001)); the binary pixel value can also be written as decimal (167, 215, 57) or hexadecimal (A7, D7, 39).

[0201] Alternatively, in the first step, the number of bits of depth of the screenshot data is obtained, which is recorded as M=8;

[0202] The second step is to convert the pixel value (155, 111, 18) of each pixel in the screenshot data (taking the pixel (554, 1243) as an example) into binary (10011011, 1101111, 10010) and the screenshot code (96B53D57F00E578698AF448F841028FDCBE20D7CDD8007F5ECD6EFF9) into binary (1001011010110101001111010101011111110 00000001110010101111000011010011000101010111101000100011111000010000010000001010001111110111001011111000100000110101111100110110000000000011111110101111011001);

[0203] The third step is to convert the binary pixel value (10011011, 1101111, 10010) of each pixel in the screenshot data (taking the pixel (554, 1243) as an example) into a pixel value with 8 bits (10011011, 01101111, 00010010);

[0204] Step 4: Get the first digit of the screenshot code, recorded as N=1; convert the digit 1 to 8, that is, 11111111;

[0205] The fifth step is to calculate the converted pixel value (10011011, 01101111, 00010010) and the converted 8-bit value 11111111 to obtain the screenshot security data (taking the pixel point (78, 1919) as an example, the pixel value of this point is (01100100, 10010000, 11101101)); the binary pixel value can also be written as decimal (100, 144, 237) or hexadecimal (64, 90, ED).

[0206] The above takes the pixel points (1050, 1911), (78, 1919), and (554, 1243) as examples. All pixel points must perform corresponding operations to obtain the screenshot security data.

[0207] In a preferred embodiment of the present invention, analyzing the screenshot safety data in step S3-4 includes analyzing the error value and the correct value of the screenshot safety data. The method for analyzing the error value and the correct value of the screenshot safety data includes the following steps:

[0208] Let Errorinformationquantity=0, Rightinformationquantity=0; Errorinformationquantity represents the error value obtained by analyzing the uploaded screenshot data; Rightinformationquantity represents the correct value obtained by analyzing the uploaded screenshot data;

[0209] S3-41, obtaining the screenshot code in step S3-2, and converting the screenshot code into binary;

[0210] S3-42, converting the pixel value of each pixel in the screenshot security data into binary;

[0211] S3-43, obtaining the depth of the screenshot security data, recorded as M′;

[0212] S3-44, obtaining the first digit of the screenshot code, recorded as N′; converting the first digit N′ into a number of digits M′;

[0213] S3-45, converting the binary pixel value of each pixel in the screenshot security data into a number of bits M′;

[0214] S3-46, operating the converted pixel value and the converted M′-bit value N′ to obtain the screenshot platform data;

[0215] S3-47, obtaining a screenshot code corresponding to the screenshot platform data according to the screenshot platform data;

[0216] S3-48, determining whether the screenshot code obtained in step S3-41 is consistent with the screenshot code corresponding to the screenshot platform data:

[0217] If the screenshot code obtained in step S3-41 is inconsistent with the screenshot code corresponding to the screenshot platform data, the analysis indicates that the received screenshot security data is unsafe; Errorinformationquantity=Errorinformationquantity+1;

[0218] If the screenshot code obtained in step S3-41 is consistent with the screenshot code corresponding to the screenshot platform data, the analysis shows that the received screenshot security data is safe; the screenshot code and the screenshot security data are stored, or the screenshot platform data is stored, Rightinformationquantity=Rightinformationquantity+1;

[0219] The next screenshot safety data is determined until all screenshot safety data are determined.

[0220] It should be noted that if the number of received screenshot security data is Q, Totalinformationquantity = Q. Assuming that the number of received screenshot security data is 15,000, the preset green color value and the preset red color value are 255, the corresponding Rightinformationquantity is 12,750, and the Errorinformationquantity is 2,250, the correct share is colored as follows:

[0221]

[0222] Coloring the error shares is:

[0223]

[0224] Assume that the number of received screenshot security data is 15,000, the preset green color value and the preset red color value are 255, the corresponding Rightinformationquantity is 1,350, and the Errorinformationquantity is 13,650. Then the correct share is colored as follows:

[0225]

[0226] Coloring the error share is:

[0227]

[0228] In a preferred embodiment of the present invention, the method for converting a single-digit value N' into a number of digits M' in step S3-44 is:

[0229] Add 1 in front of N' to make the number of digits of the value after adding 1 equal to M'; that is, get the M'-digit value N';

[0230] Alternatively, add 1 after N′ so that the number of digits of the value after adding 1 is equal to M′, thus obtaining the M′-digit value N′.

[0231] In a preferred embodiment of the present invention, the method of converting the binary pixel value of each pixel in the screenshot data into a number of bits M′ in step S3-45 is:

[0232] If the number of bits of the binary pixel value of the pixel in the screenshot safety data is not equal to M′, 0 is added in front of the binary pixel value to make the number of bits of the binary pixel values ​​of all pixels in the screenshot safety data equal to M′.

[0233] In a preferred embodiment of the present invention, the method for obtaining the screenshot platform data in step S3-46 is:

[0234]

[0235] Among them, R x′,y′,j′ Indicates the value of the red pixel value at the pixel point (x′, y′) of the received screenshot data at the j′th position; j′=1, 2, 3, ..., M′;

[0236] R″′ x′,y′,j′ Indicates the value of the red pixel at the pixel point (x′, y′) of the screenshot platform data at the j′th position;

[0237] M′ j′ It means the value of the j′th digit after converting the single-digit value N′ to the digit M′;

[0238] & means and;

[0239] or means or;

[0240]

[0241] Among them, G x′,y′,j′ Indicates the value of the green pixel value at the pixel point (x′, y′) of the received screenshot security data located at the j′th position; j′=1, 2, 3, ..., M′;

[0242] G″′ x′,y′,j′ Indicates the value of the green pixel value at the pixel point (x′, y′) of the screenshot platform data at the j′th position;

[0243] M′j′ It means the value of the j′th digit after converting the single-digit value N′ to the digit M′;

[0244] & means and;

[0245] or means or;

[0246]

[0247] Among them, B″ x′,y′,j′ Indicates the value of the blue pixel value at the pixel point (x′, y′) of the received screenshot security data at the j′th position; j′=1, 2, 3, ..., M′;

[0248] B″′ x′,y′,j′ Indicates the value of the blue pixel value at the pixel point (x′, y′) of the screenshot platform data at the j′th position;

[0249] M′ j′ It means the value of the j′th digit after converting the single-digit value N′ to the digit M′;

[0250] & means and;

[0251] or means or.

[0252] In a preferred embodiment of the present invention, the screenshot code corresponding to the screenshot platform data in step S3-47 is obtained as follows:

[0253] Screenshotdata′=Screenshotdatacalculateformula(Screenshotimage′),

[0254] Wherein, Screenshotdata′ represents the screenshot code corresponding to the screenshot platform data;

[0255] Screenshotdatacalculateformula() represents the calculation method of the screenshot code; SHA224 is preferably used;

[0256] Screenshotimage′ represents the screenshot platform data.

[0257] In a preferred embodiment of the present invention, before step S1, step S0 is further included, registering on the network analysis attack platform, and registering on the network analysis attack platform includes the following steps:

[0258] S01, obtain the mobile phone serial number and mobile phone number; the mobile phone serial number is a 15-digit string of one of the numbers 0 to 9 or any combination; the mobile phone number is a 11-digit string of one of the numbers 0 to 9 or any combination;

[0259] S02, treating the mobile phone serial number and the mobile phone number as decimal mobile phone serial number and mobile phone number, converting the mobile phone serial number and mobile phone number into sixty-binary mobile phone serial number and mobile phone number; connecting the converted mobile phone serial number and mobile phone number and sending them to the network analysis attack platform;

[0260] S03, after receiving the connected mobile phone serial number and mobile phone number, the network analysis attack platform restores the connected mobile phone serial number and mobile phone number to obtain the platform mobile phone serial number and platform mobile phone number;

[0261] S04, generating a platform number according to the platform mobile phone serial number and the platform mobile phone number, and storing the platform number in the network attack analysis platform for subsequent login judgment.

[0262] In a preferred embodiment of the present invention, the method of connecting the converted mobile phone serial number and the mobile phone number in step S02 is:

[0263] Phonestring=IMEInumber 62 -Phonenumber 62 ,

[0264] Among them, Phonestring represents the mobile phone serial number and mobile phone number after connection;

[0265] IMEInumber 62 Indicates the converted mobile phone serial number;

[0266] Phone number 62 Indicates the converted mobile phone number;

[0267] - indicates a connector.

[0268] In a preferred embodiment of the present invention, in step S03, the method of restoring the connected mobile phone serial number and mobile phone number to obtain the platform mobile phone serial number and platform mobile phone number is:

[0269] Phonestring′=IMEInumber′ 1←7 Phone number 6←1 ,

[0270] Among them, Phonestring′ represents the received mobile phone serial number and mobile phone number of the connection;

[0271] Phone number 6←1 Indicates that the sixth to the first last digit of the received mobile phone serial number and mobile phone number is the platform mobile phone number;

[0272] IMEI number ′ 1←7Indicates that the first to the last 7 digits of the received mobile phone serial number and mobile phone number are the platform mobile phone serial number.

[0273] In a preferred embodiment of the present invention, the method for generating a platform number according to the platform mobile phone serial number and the platform mobile phone number in step S04 includes the following steps:

[0274] S041, converting the platform mobile phone serial number and the platform mobile phone number into a hexadecimal mobile phone serial number and mobile phone number, and connecting the converted platform mobile phone serial number and the platform mobile phone number to obtain a platform connection number;

[0275] S042, using the platform number generation method to obtain the platform number using the platform connection number.

[0276] In a preferred embodiment of the present invention, after connecting the converted platform mobile phone serial number and the platform mobile phone number in step S041, the method for obtaining the platform connection number is:

[0277] Phonestring″=IMEInumber 16 -Phonenumber 16 ,

[0278] Among them, Phonestring″ represents the platform connection number obtained by connecting the converted platform mobile phone serial number and the platform mobile phone number;

[0279] IMEInumber 16 Indicates the converted platform mobile phone serial number;

[0280] Phone number 16 Indicates the converted platform mobile phone number;

[0281] - indicates a connector.

[0282] In a preferred embodiment of the present invention, in step S042, the method of obtaining the platform number by using the platform number generation method from the platform connection number is as follows:

[0283] Platformnumber=Platformnumbercalculateformula(Phonestring″),

[0284] Wherein, Platformnumber indicates the platform number;

[0285] Platformnumbercalculateformula() represents the platform number calculation method; SHA224 is preferably used;

[0286] Phonestring″ indicates the platform connection number.

[0287] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the claims and their equivalents.

Claims

1. A network attack behavior analysis and control method, characterized in that: The following steps are involved: S1, log in to the network analysis attack platform; S2, after logging into the network analysis and attack platform, visualizes the display.

2. The network attack behavior analysis and control method according to claim 1, characterized in that: Step S2 includes the following steps: S21, obtaining an error value and a total amount of received screenshot security data; S22, obtaining an error rate and a correct rate according to the obtained error value and the total amount of received screenshot safety data; S23, obtaining a pie template, and dividing the pie into Totalinformationquantity portions, where Totalinformationquantity represents the total amount of received screenshot security data; S24, taking consecutive Rightinformationquantity portions as the correct portion, where Rightinformationquantity represents the correct value obtained by analyzing the uploaded screenshot data; coloring the pie corresponding to the correct portion; and marking the correctness rate on the pie corresponding to the correct portion; S25, coloring the remaining shares and marking the error rate on the pie corresponding to the remaining shares.

3. The network attack behavior analysis and control method according to claim 1, characterized in that: The error rate is calculated in step S22 as follows: Errorinformationrate=Errorinformationquantity / Totalinformationquantity*100%, Errorinformationrate indicates the error rate; Errorinformationquantity represents the error value obtained by analyzing the uploaded screenshot data; Totalinformationquantity indicates the total amount of screenshot security data received.

4. The network attack behavior analysis and control method according to claim 1, characterized in that: The calculation method of the accuracy in step S22 is: Rightinformationrate=Rightinformationquantity / Totalinformationquantity*100%, Rightinformationrate indicates the correctness rate; Rightinformationquantity represents the correct value obtained based on analyzing the uploaded screenshot data; Totalinformationquantity indicates the total amount of screenshot security data received; Rightinformationrate+Errorinformationrate=100%, Among them, Rightinformationrate represents the correct rate; Errorinformationrate indicates the error rate.

5. The network attack behavior analysis and control method according to claim 1, characterized in that: The method for calculating the total amount of screenshot security data in step S21 is: Totalinformationquantity=Errorinformationquantity+Rightinformationquantity, Among them, Totalinformationquantity represents the total amount of screenshot security data received; Errorinformationquantity represents the error value obtained by analyzing the uploaded screenshot data; Rightinformationquantity indicates the correct value obtained by analyzing the uploaded screenshot data.

6. The network attack behavior analysis and control method according to claim 1, characterized in that: The method for coloring the correct share in step S24 is: Among them, R represents the red value; G represents the green value; B represents the blue value; Rightinformationrate indicates the correctness rate; G0 represents the preset green color value; Indicates rounding down.

7. The network attack behavior analysis and control method according to claim 1, characterized in that: The method for coloring the error share in step S25 is: Among them, R represents the red value; G represents the green value; B represents the blue value; Errorinformationrate indicates the error rate; R0 represents the preset red color value; Indicates rounding down.

8. The network attack behavior analysis and control method according to claim 1, characterized in that: Before step S1, the method also includes performing a network attack using one or any combination of a denial of service attack, a man-in-the-middle attack, a password intrusion, and a node attack.

Images