Network attack and defense information display method and device, equipment and storage medium
By obtaining information elements on the network attack and defense range platform and superimposing them with the virtual scene map to build a situation map, dynamically displaying the network attack and defense process, solving the problem of poor interactiveness of existing network security learning and achieving a more efficient learning experience.
Patent Information
- Application Number
- CN202310868905.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-07-14
- Publication Date
- 2025-01-14
AI Technical Summary
The existing network security learning methods are poor in interactivity and cannot reflect learning situations in a timely manner, resulting in low learning efficiency.
Obtain information elements through the network offensive and defense range platform, and superimpose them with the target virtual scene map to build an offensive and defense situation map, and dynamically display them on the display interface. Select the corresponding information display template according to different modes (training, competition, experimentation, practical combat) to display it. Related data.
It improves the interactive nature of network security knowledge learning, makes the learning process more intuitive and real-time, and improves learning efficiency.
Smart Images
Figure CN119311758A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of network security technology, and in particular to a network attack and defense information display method, device, equipment and storage medium. Background Art
[0002] With the development of Internet technology, the Internet has been applied to all aspects of work and life, and the importance of network security is also increasing. At present, network security knowledge is generally learned through books or online platforms, which has poor interactivity and cannot be informed of the learning situation in a timely manner, resulting in low efficiency in network security learning. Summary of the invention
[0003] The main purpose of the present invention is to provide a network attack and defense information display method, device, equipment and storage medium, aiming to solve the technical problem of poor interactivity of network security learning in the prior art.
[0004] To achieve the above object, the present invention provides a method for displaying network attack and defense information, the method comprising the following steps:
[0005] In the process of conducting network attack and defense through the network attack and defense range platform, obtain information elements of network attack and defense;
[0006] Overlaying the information elements with the target virtual scene map to construct an attack and defense situation map;
[0007] The attack and defense situation map and the information elements are dynamically displayed on the display interface.
[0008] Optionally, superimposing the information elements with a target virtual scene map to construct an attack and defense situation map includes:
[0009] Matching a target virtual scene map according to a network attack and defense mode, and obtaining target information elements from the information elements according to the network attack and defense mode;
[0010] The target information elements are superimposed on the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0011] Optionally, superimposing the target information element with the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode includes:
[0012] Determine the attacker information and defender information in the network attack and defense according to the target information element;
[0013] The attacker information is superimposed on the attacker area in the target virtual scene map, and the defender information is superimposed on the defender area in the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0014] Optionally, dynamically displaying the attack and defense situation map and the information elements on a display interface includes:
[0015] Determine information display templates based on network attack and defense models;
[0016] The attack and defense situation diagram and the information elements are dynamically displayed on a display interface through the information display template.
[0017] Optionally, dynamically displaying the attack and defense situation map and the information elements on a display interface through the information display template includes:
[0018] When the network attack and defense mode is a training mode, determining the information display template to be an attack and defense training display template;
[0019] Displaying the attack and defense situation map in the map display area of the attack and defense training display template;
[0020] Attack and defense training data are selected from the information elements, and the attack and defense training data are displayed in the training data display area of the attack and defense training display template.
[0021] Optionally, dynamically displaying the attack and defense situation map and the information elements on a display interface through the information display template includes:
[0022] When the network attack and defense mode is a competitive mode, determining the information display template to be an attack and defense competitive display template;
[0023] Displaying the attack and defense situation map in the map display area of the attack and defense competition display template;
[0024] The competitive data is selected from the information elements, and the competitive data is displayed in the competitive data display area in the offensive and defensive competitive display template.
[0025] Optionally, dynamically displaying the attack and defense situation map and the information elements on a display interface through the information display template includes:
[0026] When the network attack and defense mode is the test mode, determining the information display template to be an attack and defense test display template;
[0027] Displaying the attack and defense situation map in the map display area of the attack and defense test display template;
[0028] Experimental data are selected from the information elements, and the experimental data are displayed in the experimental data display area in the attack and defense experiment display template.
[0029] Optionally, dynamically displaying the attack and defense situation map and the information elements on a display interface through the information display template includes:
[0030] When the network attack and defense mode is the actual combat mode, determining the information display template to be an attack and defense actual combat display template;
[0031] Displaying the attack and defense situation map in the map display area of the attack and defense actual combat display template;
[0032] Actual combat data is selected from the information elements, and the actual combat data is displayed in the actual combat data display area in the attack and defense actual combat display template.
[0033] Optionally, selecting test data from the information elements and displaying the test data in a test data display area in the attack and defense test display template includes:
[0034] Selecting test data from the information elements, and determining a vulnerability verification result of the test based on the test data;
[0035] The vulnerability verification result is displayed in the test data display area in the attack and defense competition display template.
[0036] Optionally, selecting actual combat data from the information elements and displaying the actual combat data in an actual combat data display area in the attack and defense actual combat display template includes:
[0037] Selecting actual combat data from the information elements, and determining the security risk information of the defender according to the actual combat data;
[0038] The potential safety hazard information is displayed in the actual combat data display area in the actual attack and defense display template.
[0039] In addition, to achieve the above-mentioned purpose, the present invention also proposes a network attack and defense information display device, the device comprising:
[0040] An acquisition module is used to acquire information elements of network attack and defense during the process of network attack and defense through the network attack and defense range platform;
[0041] A construction module, used to superimpose the information elements with the target virtual scene map to construct an attack and defense situation map;
[0042] The display module is used to dynamically display the attack and defense situation map and the information elements on the display interface.
[0043] Optionally, the construction module is also used to match the target virtual scene map according to the network attack and defense mode, and obtain target information elements from the information elements according to the network attack and defense mode; superimpose the target information elements with the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0044] Optionally, the construction module is also used to determine the attacker information and defender information in the network attack and defense based on the target information elements; superimpose the attacker information on the attacker area in the target virtual scene map, and superimpose the defender information on the defender area in the target virtual scene map, to construct an attack and defense situation diagram corresponding to the network attack and defense mode.
[0045] Optionally, the display module is further used to determine an information display template according to the network attack and defense mode; and dynamically display the attack and defense situation map and the information elements on the display interface through the information display template.
[0046] Optionally, the display module is also used to determine that the information display template is an attack and defense training display template when the network attack and defense mode is a training mode; display the attack and defense situation map in the map display area of the attack and defense training display template; select attack and defense training data from the information elements, and display the attack and defense training data in the training data display area of the attack and defense training display template.
[0047] Optionally, the display module is also used to determine that the information display template is an attack and defense competitive display template when the network attack and defense mode is a competitive mode; display the attack and defense situation map in the map display area of the attack and defense competitive display template; select competitive data from the information elements, and display the competitive data in the competitive data display area of the attack and defense competitive display template.
[0048] Optionally, the display module is also used to determine that the information display template is an attack and defense test display template when the network attack and defense mode is a test mode; display the attack and defense situation map in the map display area of the attack and defense test display template; select test data from the information elements, and display the test data in the test data display area in the attack and defense test display template.
[0049] Optionally, the display module is also used to determine that the information display template is an attack and defense actual combat display template when the network attack and defense mode is an actual combat mode; display the attack and defense situation map in the map display area of the attack and defense actual combat display template; select actual combat data from the information elements, and display the actual combat data in the actual combat data display area of the attack and defense actual combat display template.
[0050] In addition, to achieve the above-mentioned purpose, the present invention also proposes a network attack and defense information display device, which includes: a memory, a processor, and a network attack and defense information display program stored on the memory and executable on the processor, wherein the network attack and defense information display program is configured to implement the steps of the network attack and defense information display method described above.
[0051] In addition, to achieve the above-mentioned purpose, the present invention also proposes a storage medium, on which a network attack and defense information display program is stored. When the network attack and defense information display program is executed by a processor, the steps of the network attack and defense information display method described above are implemented.
[0052] The present invention obtains information elements of network attack and defense during the process of network attack and defense through the network attack and defense range platform; superimposes the information elements with the target virtual scene map to construct an attack and defense situation map; and dynamically displays the attack and defense situation map and the information elements on the display interface. The present invention superimposes the information elements in the network attack and defense process with the target virtual scene map to construct an attack and defense situation map, and dynamically displays the attack and defense situation map and information elements on the display interface, intuitively displays the attack and defense situation, and improves the interactivity of network security knowledge learning. BRIEF DESCRIPTION OF THE DRAWINGS
[0053] Figure 1 It is a schematic diagram of the structure of a network attack and defense information display device in a hardware operating environment involved in an embodiment of the present invention;
[0054] Figure 2 It is a flowchart of the first embodiment of the network attack and defense information display method of the present invention;
[0055] Figure 3 It is a flowchart of the second embodiment of the network attack and defense information display method of the present invention;
[0056] Figure 4 It is a flowchart of a third embodiment of the network attack and defense information display method of the present invention;
[0057] Figure 5 This is a structural block diagram of the first embodiment of the network attack and defense information display device of the present invention.
[0058] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION
[0059] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.
[0060] Reference Figure 1 , Figure 1It is a schematic diagram of the structure of a network attack and defense information display device in the hardware operating environment involved in the embodiment of the present invention.
[0061] like Figure 1 As shown, the network attack and defense information display device may include: a processor 1001, such as a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include a display screen (Display), an input unit such as a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a wireless fidelity (Wireless-Fidelity, WI-FI) interface). The memory 1005 may be a high-speed random access memory (Random Access Memory, RAM), or a stable non-volatile memory (Non-Volatile Memory, NVM), such as a disk storage. The memory 1005 may also be a storage device independent of the aforementioned processor 1001.
[0062] Those skilled in the art will understand that Figure 1 The structure shown in does not constitute a limitation on the network attack and defense information display device, and may include more or fewer components than shown in the figure, or a combination of certain components, or a different arrangement of components.
[0063] like Figure 1 As shown, the memory 1005 as a storage medium may include an operating system, a network communication module, a user interface module, and a network attack and defense information display program.
[0064] exist Figure 1 In the network attack and defense information display device shown, the network interface 1004 is mainly used for data communication with the network server; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 can be set in the network attack and defense information display device, and the network attack and defense information display device calls the network attack and defense information display program stored in the memory 1005 through the processor 1001, and executes the network attack and defense information display method provided in the embodiment of the present invention.
[0065] The embodiment of the present invention provides a method for displaying network attack and defense information. Figure 2 , Figure 2 It is a flowchart of the first embodiment of the network attack and defense information display method of the present invention.
[0066] In this embodiment, the network attack and defense information display method includes the following steps:
[0067] Step S1: In the process of conducting network attack and defense through the network attack and defense range platform, information elements of network attack and defense are obtained.
[0068] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a network attack and defense information display device, etc. The following takes the network attack and defense information display device as an example to illustrate this embodiment and the following embodiments.
[0069] It can be understood that the network attack and defense range platform can be a platform that can provide users with network attack and defense infrastructure for network attack and defense learning; network attack and defense include network attack and network defense; information elements can be elements of information used in the process of network attack and network defense, for example, the information element table includes but is not limited to: number of attacks, name of the attacker, name of the defender, attack and defense items, attack and defense paths, etc.
[0070] Step S2: superimpose the information elements with the target virtual scene map to construct an attack and defense situation map.
[0071] It can be understood that the target virtual scene map can be a pre-built virtual map corresponding to the network attack and defense mode. The virtual scene map can dynamically display the attack and defense situation of the network attacker and the network defender during the network attack and defense process in a simulated way; the attack and defense situation map can be a map that can visually display the attack and defense situation effects of the network attack and defense. For example, the attack and defense situation map can visualize the attack and defense path, captured area, number of successful attacks and number of successful defenses, etc.
[0072] As an implementation method, a target scenario map corresponding to the target network attack and defense mode is obtained, the attacker area, defender area, and attack and defense map path in the target scenario map are determined, and the attack and defense items, attacker name, number of successful attacks, captured area, attack path, defender name, number of successful defenses, and defense path of the network attacker and the network defender in the network attack and defense process are determined according to the information elements. The attack and defense items are superimposed on the project name display area in the map, the attacker name and the number of successful attacks are superimposed on the attacker area, the defender name and the number of successful defenses are superimposed on the defender area, the attack path and the defense path are superimposed on the attack and defense map path, the number of successful attacks is superimposed on the battle result display area in the attacker area, the number of successful defenses is superimposed on the battle result display area in the defender area, the captured area is marked in the defender area, and the construction of the attack and defense situation map is completed.
[0073] Step S3: Dynamically display the attack and defense situation map and the information elements on a display interface.
[0074] As an implementation method, the attack and defense situation map is displayed in winter in the map display area of the display interface, and the information elements are dynamically displayed in the attack and defense data display area of the display interface.
[0075] Furthermore, in order to visualize the situation of network attack and defense to improve the interactivity of network attack and defense, the step S2 includes: matching the target virtual scene map according to the network attack and defense mode, and obtaining the target information elements from the information elements according to the network attack and defense mode; superimposing the target information elements with the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0076] It can be understood that the network attack and defense mode can be a mode for conducting network attack and defense learning through a network attack and defense range platform. The network attack and defense mode includes but is not limited to a training mode, a competitive mode, a test mode and an actual combat mode; a corresponding virtual scene map is created in advance for each network attack and defense mode, and in the process of conducting network attack and defense through the network attack and defense range platform, the corresponding target virtual scene map is matched in the map database according to the network attack and defense mode selected by the user; the target information element can be an information element that needs to be superimposed on the target virtual scene map.
[0077] It should be understood that the implementation method of obtaining target information elements from information elements according to the network attack and defense mode can be: according to the network attack and defense mode, searching for corresponding preset information elements in the preset mapping relationship table, extracting the preset information elements from the information elements to obtain the target information elements; the implementation method of superimposing the target information elements with the target virtual scene map can be: filling the target information elements into the corresponding template area in the target virtual scene map, and completing the superposition of the target information elements and the target virtual scene map.
[0078] In the specific implementation, the target virtual scene map is matched in the map database according to the network attack and defense mode used in the network attack and defense process, the corresponding preset information elements are found in the preset mapping relationship table according to the network attack and defense mode, the preset information elements are extracted from the information elements, the target information elements are obtained, and the target information elements are filled into the corresponding template area in the target virtual scene map to complete the superposition of the target information elements and the target virtual scene map.
[0079] Furthermore, in order to display the network attack and defense situation in real time and thus improve the interactivity of the network attack and defense, the target information elements are superimposed on the target virtual scene map to construct an attack and defense situation diagram corresponding to the network attack and defense mode, including: determining the attacker information and defender information in the network attack and defense according to the target information elements; superimposing the attacker information on the attacker area in the target virtual scene map, and superimposing the defender information on the defender area in the target virtual scene map, to construct an attack and defense situation diagram corresponding to the network attack and defense mode.
[0080] It can be understood that the attacker's information includes but is not limited to: the attacker's name, number of successful attacks, captured area, and attack path; the defender's information includes but is not limited to: the defender's name, number of defenses, lost area, defense path, and number of successful defenses; the attacker's area can be the area in the target virtual scene map used to represent the attacker; the defender's area can be the area in the target virtual scene map used to represent the defender.
[0081] In an example, for example: the name of the attacker is A, the name of the defender is B, the path of the network attack in the network attack and defense is a: external network-b: firewall-c: internal network-d: core internal network, which is divided into 4 stages. The proportion of each stage in the attack process is 0.4, 0.2, 0.2 and 0.2. The name of the attacker is filled in the template corresponding to the attacker's area, and the name of the defender is filled in the template corresponding to the defender's area. Assuming that it is currently in the second stage, the overall progress is 0.6, and the map attack and defense path is advanced to the defender to 60% of the overall path to indicate the current attack and defense situation. Correspondingly, the defender's area on the advancement path is marked as the occupied area, and the number of successful attacks and successful defenses during the attack and defense process are filled in the corresponding template in the map to complete the construction of the attack and defense situation map.
[0082] In the process of conducting network attack and defense through the network attack and defense range platform, this embodiment obtains information elements of network attack and defense; superimposes the information elements with the target virtual scene map to construct an attack and defense situation map; and dynamically displays the attack and defense situation map and the information elements on the display interface. This embodiment superimposes the information elements in the network attack and defense process with the target virtual scene map to construct an attack and defense situation map, and dynamically displays the attack and defense situation map and information elements on the display interface, intuitively displays the attack and defense situation, and improves the interactivity of network security knowledge learning.
[0083] refer to Figure 3 , Figure 3 It is a flowchart of the second embodiment of the network attack and defense information display method of the present invention.
[0084] Based on the above first embodiment, in this embodiment, step S30 includes:
[0085] Step S31: Determine an information display template according to the network attack and defense mode.
[0086] It is understandable that the information display template may be a pre-set template for displaying network attack and defense information, and a corresponding information display template is created in advance for each network attack and defense mode.
[0087] In a further specific implementation, the corresponding information display template is searched in a preset template database according to the network attack and defense mode.
[0088] Step S32: dynamically displaying the attack and defense situation map and the information elements on a display interface through the information display template.
[0089] In the specific implementation, the corresponding information display template is searched in the preset template database according to the network attack and defense mode in the network attack and defense process, and the attack and defense situation map and information elements are filled into the corresponding areas in the information display template, so that the attack and defense situation map and information elements are dynamically displayed through the information display template.
[0090] Furthermore, in order to improve the interactivity of network attack and defense training, the step S32 includes: when the network attack and defense mode is a training mode, determining that the information display template is an attack and defense training display template; displaying the attack and defense situation map in the map display area of the attack and defense training display template; selecting attack and defense training data from the information elements, and displaying the attack and defense training data in the training data display area of the attack and defense training display template.
[0091] It is understandable that the training mode can be a model that takes attack and defense training as the core, is guided by task objectives, integrates knowledge training, skill training, and ability assessment, and provides sustainable and systematic training for network security talents; the attack and defense training display template can be a template for displaying attack and defense training information; the map display area can be an area pre-demarcated in the attack and defense training display template for displaying the attack and defense situation map; the attack and defense training data can be the data generated by the user during the attack and defense training process, and the attack and defense training data includes but is not limited to: training activity, total skill training, training activity change trend, training subject number statistics and training courses, training subject statistics include: initial access, command execution, other subjects, protection bypass, continuous retention, authority escalation, credential access, information collection, command and control, and lateral movement; training courses include: security theory, security operation and maintenance, Web security, data security, server security, software security, system security, security protection, and security management; the training data display area can be an area pre-demarcated in the attack and defense training display template for displaying attack and defense training data.
[0092] In the specific implementation, if the user conducts network attack and defense training through the platform, the network attack and defense mode is the training mode, and the information display template is determined to be the attack and defense training display template. The attack and defense situation map is displayed in the map display area of the attack and defense training display template, and attack and defense training data such as training activity, total skill training, training activity change trend, training subject number statistics and training courses are extracted from the information elements, and the attack and defense training data is filled into the corresponding template area in the training data display area, so that the attack and defense situation map and the attack and defense training data are displayed through the template.
[0093] Furthermore, in order to improve the interactivity of network attack and defense competition, the step S32 also includes: when the network attack and defense mode is a competition mode, determining that the information display template is an attack and defense competition display template; displaying the attack and defense situation map in the map display area of the attack and defense competition display template; selecting competition data from the information elements, and displaying the competition data in the competition data display area of the attack and defense competition display template.
[0094] It is understandable that the competition mode can be to create a highly simulated network attack and defense virtual environment, and through multiple security competition modes, provide a practical competition mode for the training, assessment and selection of network security talents; the attack and defense competition display template can be a template for displaying attack and defense competition information; the map display area can be an area pre-demarcated in the attack and defense competition display template for displaying the attack and defense situation map; the competition data includes but is not limited to: attacking team, defending team, attack and defense questions, contestant answer details, contestant answer ranking, etc.
[0095] In the specific implementation, if the user conducts network attack and defense competitions through the platform, the network attack and defense mode is the competition mode, and the information display template is determined to be the attack and defense competition display template. The attack and defense situation map is displayed in the map display area in the attack and defense competition display template, and the attacking team, defending team, attack and defense questions, player answer details, player answer ranking and other competition data are extracted from the element information, and the competition data is filled into the corresponding template area in the attack and defense competition display template, so that the attack and defense situation map and competition data are displayed through the template.
[0096] This embodiment determines an information display template according to the network attack and defense mode; the attack and defense situation diagram and the information elements are dynamically displayed on the display interface through the information display template. The attack and defense situation and attack and defense data under different network attack and defense modes can be dynamically displayed through different information display templates, thereby improving the interactivity of network attack and defense.
[0097] refer to Figure 4 , Figure 4 It is a flowchart of the third embodiment of the network attack and defense information display method of the present invention.
[0098] Based on the above embodiments, in this embodiment, step S32 further includes:
[0099] Step S321: when the network attack and defense mode is the test mode, determining that the information display template is an attack and defense test display template.
[0100] It can be understood that the test mode can be a virtual-real combination scenario that can provide a high degree of simulation, mutual isolation, and efficient deployment, and provide a mode of process management, energy efficiency evaluation, data analysis, and deduction and review for network attack and defense; the attack and defense test display template can be a template for displaying attack and defense test information.
[0101] Step S322: displaying the attack and defense situation map in the map display area of the attack and defense experiment display template.
[0102] It can be understood that the map display area can be an area pre-demarcated in the attack and defense experiment display template for displaying the attack and defense situation map.
[0103] Step S323: selecting test data from the information elements, and displaying the test data in the test data display area in the attack and defense test display template.
[0104] It is understandable that the test data can be the data generated by the user in the process of conducting network attack and defense tests. The test data includes but is not limited to: vulnerability verification and adversarial data. Vulnerability verification includes: vulnerability disclosure, analysis verification, POC writing, vulnerability scanning, vulnerability detection, target screening, scanning reports and emergency reports, etc.; adversarial data includes: technical and tactical categories, information collection, target detection, penetration breakthrough, privilege escalation, attack entrapment and tracing countermeasures, etc.
[0105] Furthermore, in order to improve the interactivity of network attack and defense combat, the step S32 also includes: when the network attack and defense mode is the combat mode, determining the information display template as an attack and defense combat display template; displaying the attack and defense situation map in the map display area of the attack and defense combat display template; selecting combat data from the information elements, and displaying the combat data in the combat data display area of the attack and defense combat display template.
[0106] It can be understood that the actual combat mode can be a mode with four capability centers of preparation, command, analysis and review, which provides actual combat support with complete process, comprehensive capability, objective verification, safety and controllability for actual network attack and defense exercises; the actual attack and defense display template can be a template for displaying attack and defense test information; the map display area can be an area pre-designated in the actual attack and defense display template for displaying the attack and defense situation map; the actual combat data can be the data generated in the actual network attack and defense process, and the actual combat data includes but is not limited to: actual combat resources, attack and defense situation and security risk information, and the actual combat resources include: target assets that can be used for actual attack and defense, attack exit IP addresses, etc.; security risk information includes: lack of analysis of attack monitoring data, exploitation by social engineering attacks, mismatch of responsibilities and powers, lack of complete log records in the system, difficulty in monitoring and discovering vulnerability attacks, weak passwords not rectified, public vulnerabilities not fixed, too large Internet exposure, lack of supervision of important equipment and insufficient safety awareness of employees, etc.; the actual combat data display area can be an area pre-designated in the actual attack and defense display template for displaying actual combat data.
[0107] Furthermore, in order to improve the interactivity of the network attack and defense test, the test data is selected from the information elements and displayed in the test data display area in the attack and defense test display template, including: selecting the test data from the information elements and determining the vulnerability verification results of the test based on the test data; and displaying the vulnerability verification results in the test data display area in the attack and defense competition display template.
[0108] It can be understood that determining the vulnerability verification result of the test based on the test data can be to conduct vulnerability analysis based on the test data, and determine the verification result of the vulnerability in the test based on the vulnerability analysis result; the vulnerability verification result can be the result of verifying the vulnerability through a network attack and defense test; the vulnerability verification result includes vulnerability type, vulnerability level, etc.
[0109] Furthermore, in order to improve the interactivity of network attack and defense combat, actual combat data is selected from the information elements, and the actual combat data is displayed in the actual combat data display area in the attack and defense combat display template, including: selecting actual combat data from the information elements, and determining the security risk information of the defender based on the actual combat data; and displaying the security risk information in the actual combat data display area in the attack and defense combat display template.
[0110] In specific implementation, the actual combat data is analyzed, and the security risk information of the defender is determined based on the analysis results. The security risk information is displayed in the actual combat data display area. The security risk information includes but is not limited to: lack of analysis of attack monitoring data, exploitation by social engineering attacks, mismatch of responsibilities and powers, no complete log records in the system, vulnerability attacks are difficult to monitor and discover, weak passwords have not been rectified, public vulnerabilities have not been fixed, excessive Internet exposure, lack of supervision of important equipment and insufficient safety awareness among employees.
[0111] It should be noted that the embodiments of the present application present network attack and defense data intuitively in a visual manner, and provide training mode, competition mode, test mode and actual battlefield mode for users to learn network attack and defense; support users to build three-dimensional digital security attack and defense capabilities from basic attack and defense knowledge training and learning, network attack and defense competition training, simulation drills, and actual attack and defense; perform simulated three-dimensional scene design based on the concept of scenario, and dynamically display the attack and defense situation by matching virtual scene maps of different network attack and defense modes, and presenting the attack and defense information elements to the corresponding virtual scene maps.
[0112] In this embodiment, when the network attack and defense mode is the test mode, the information display template is determined to be an attack and defense test display template; the attack and defense situation diagram is displayed in the map display area of the attack and defense test display template; and test data is selected from the information elements and displayed in the test data display area of the attack and defense test display template. In this embodiment, the attack and defense situation diagram is displayed in the map display area of the attack and defense test display template, and the test data is displayed in the test data display area, so that the user can grasp the specific situation of the network attack and defense test in real time, and the interactivity in the test mode of the network attack and defense is improved.
[0113] In addition, an embodiment of the present invention further proposes a storage medium, on which a network attack and defense information display program is stored. When the network attack and defense information display program is executed by a processor, the steps of the network attack and defense information display method described above are implemented.
[0114] Reference Figure 5 , Figure 5 This is a structural block diagram of the first embodiment of the network attack and defense information display device of the present invention.
[0115] like Figure 5 As shown, the network attack and defense information display device proposed in the embodiment of the present invention includes:
[0116] The acquisition module 10 is used to acquire information elements of network attack and defense during the process of network attack and defense through the network attack and defense range platform;
[0117] A construction module 20 is used to superimpose the information elements with the target virtual scene map to construct an attack and defense situation map;
[0118] The display module 30 is used to dynamically display the attack and defense situation diagram and the information elements on a display interface.
[0119] Based on the first embodiment of the network attack and defense information display device of the present invention, a second embodiment of the network attack and defense information display device of the present invention is proposed.
[0120] In this embodiment, the construction module 20 is also used to match the target virtual scene map according to the network attack and defense mode, and obtain the target information elements from the information elements according to the network attack and defense mode; superimpose the target information elements with the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0121] The construction module 20 is also used to determine the attacker information and defender information in the network attack and defense according to the target information elements; superimpose the attacker information on the attacker area in the target virtual scene map, and superimpose the defender information on the defender area in the target virtual scene map, to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0122] The display module 30 is further used to determine an information display template according to the network attack and defense mode; and dynamically display the attack and defense situation diagram and the information elements on the display interface through the information display template.
[0123] The display module 30 is also used to determine that the information display template is an attack and defense training display template when the network attack and defense mode is a training mode; display the attack and defense situation map in the map display area of the attack and defense training display template; select attack and defense training data from the information elements, and display the attack and defense training data in the training data display area of the attack and defense training display template.
[0124] The display module 30 is also used to determine that the information display template is an attack and defense competitive display template when the network attack and defense mode is a competitive mode; display the attack and defense situation map in the map display area of the attack and defense competitive display template; select competitive data from the information elements, and display the competitive data in the competitive data display area of the attack and defense competitive display template.
[0125] The display module 30 is also used to determine that the information display template is an attack and defense test display template when the network attack and defense mode is a test mode; to display the attack and defense situation map in the map display area of the attack and defense test display template; to select test data from the information elements, and to display the test data in the test data display area of the attack and defense test display template.
[0126] The display module 30 is also used to determine that the information display template is an attack and defense actual combat display template when the network attack and defense mode is an actual combat mode; to display the attack and defense situation map in the map display area of the attack and defense actual combat display template; to select actual combat data from the information elements, and to display the actual combat data in the actual combat data display area of the attack and defense actual combat display template.
[0127] The display module 30 is further used to select test data from the information elements and determine the vulnerability verification result of the test according to the test data; and display the vulnerability verification result in the test data display area in the attack and defense competition display template.
[0128] The display module 30 is further used to select actual combat data from the information elements, and determine the potential safety hazard information of the defender according to the actual combat data; and display the potential safety hazard information in the actual combat data display area in the attack and defense actual combat display template.
[0129] The present invention also proposes A1, a network attack and defense information display method, the method comprising:
[0130] In the process of conducting network attack and defense through the network attack and defense range platform, obtain information elements of network attack and defense;
[0131] Overlaying the information elements with the target virtual scene map to construct an attack and defense situation map;
[0132] The attack and defense situation map and the information elements are dynamically displayed on the display interface.
[0133] A2. The method described in A1, wherein the information elements are superimposed on the target virtual scene map to construct an attack and defense situation map, comprises:
[0134] Matching a target virtual scene map according to a network attack and defense mode, and obtaining target information elements from the information elements according to the network attack and defense mode;
[0135] The target information elements are superimposed on the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0136] A3. The method as described in A2, wherein the target information element is superimposed on the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode, including:
[0137] Determine the attacker information and defender information in the network attack and defense according to the target information element;
[0138] The attacker information is superimposed on the attacker area in the target virtual scene map, and the defender information is superimposed on the defender area in the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0139] A4. The method as described in any one of A1 to A3, wherein the attack and defense situation diagram and the information elements are dynamically displayed on the display interface, comprising:
[0140] Determine information display templates based on network attack and defense models;
[0141] The attack and defense situation diagram and the information elements are dynamically displayed on a display interface through the information display template.
[0142] A5. The method as described in A4, wherein the information display template is used to dynamically display the attack and defense situation map and the information elements on the display interface, including:
[0143] When the network attack and defense mode is a training mode, determining the information display template to be an attack and defense training display template;
[0144] Displaying the attack and defense situation map in the map display area of the attack and defense training display template;
[0145] Attack and defense training data are selected from the information elements, and the attack and defense training data are displayed in the training data display area of the attack and defense training display template.
[0146] A6. The method as described in A4, wherein the information display template is used to dynamically display the attack and defense situation map and the information elements on the display interface, including:
[0147] When the network attack and defense mode is a competitive mode, determining the information display template to be an attack and defense competitive display template;
[0148] Displaying the attack and defense situation map in the map display area of the attack and defense competition display template;
[0149] The competitive data is selected from the information elements, and the competitive data is displayed in the competitive data display area in the offensive and defensive competitive display template.
[0150] A7. The method as described in A4, wherein the information display template is used to dynamically display the attack and defense situation map and the information elements on the display interface, including:
[0151] When the network attack and defense mode is the test mode, determining the information display template to be an attack and defense test display template;
[0152] Displaying the attack and defense situation map in the map display area of the attack and defense test display template;
[0153] Experimental data are selected from the information elements, and the experimental data are displayed in the experimental data display area in the attack and defense experiment display template.
[0154] A8. The method as described in A4, wherein the information display template is used to dynamically display the attack and defense situation map and the information elements on the display interface, including:
[0155] When the network attack and defense mode is the actual combat mode, determining the information display template to be an attack and defense actual combat display template;
[0156] Displaying the attack and defense situation map in the map display area of the attack and defense actual combat display template;
[0157] Actual combat data is selected from the information elements, and the actual combat data is displayed in the actual combat data display area in the attack and defense actual combat display template.
[0158] A9. The method as described in A7, wherein the test data is selected from the information elements and displayed in the test data display area in the attack and defense test display template, including:
[0159] Selecting test data from the information elements, and determining a vulnerability verification result of the test based on the test data;
[0160] The vulnerability verification result is displayed in the test data display area in the attack and defense competition display template.
[0161] A10. The method as described in A8, wherein the actual combat data is selected from the information elements and displayed in the actual combat data display area in the attack and defense actual combat display template, including:
[0162] Selecting actual combat data from the information elements, and determining the security risk information of the defender according to the actual combat data;
[0163] The potential safety hazard information is displayed in the actual combat data display area in the actual attack and defense display template.
[0164] The present invention also proposes B11, a network attack and defense information display device, the device comprising:
[0165] An acquisition module is used to acquire information elements of network attack and defense during the process of network attack and defense through the network attack and defense range platform;
[0166] A construction module, used to superimpose the information elements with the target virtual scene map to construct an attack and defense situation map;
[0167] The display module is used to dynamically display the attack and defense situation map and the information elements on the display interface.
[0168] B12. In the device as described in B11, the construction module is also used to match the target virtual scene map according to the network attack and defense mode, and obtain the target information elements from the information elements according to the network attack and defense mode; superimpose the target information elements with the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0169] B13. In the device as described in B12, the construction module is also used to determine the attacker information and defender information in the network attack and defense based on the target information elements; superimpose the attacker information on the attacker area in the target virtual scene map, and superimpose the defender information on the defender area in the target virtual scene map, to construct an attack and defense situation map corresponding to the network attack and defense mode.
[0170] B14. In the device as described in any one of B11-B13, the display module is also used to determine an information display template according to the network attack and defense mode; and dynamically display the attack and defense situation map and the information elements on the display interface through the information display template.
[0171] B15. In the device as described in B14, the display module is further used to determine that the information display template is an attack and defense training display template when the network attack and defense mode is a training mode; display the attack and defense situation map in the map display area of the attack and defense training display template; select attack and defense training data from the information elements, and display the attack and defense training data in the training data display area of the attack and defense training display template.
[0172] B16. In the device as described in B14, the display module is further used to determine that the information display template is an attack and defense competitive display template when the network attack and defense mode is a competitive mode; to display the attack and defense situation map in the map display area of the attack and defense competitive display template; to select competitive data from the information elements, and to display the competitive data in the competitive data display area of the attack and defense competitive display template.
[0173] B17. In the device as described in B14, the display module is also used to determine that the information display template is an attack and defense test display template when the network attack and defense mode is a test mode; to display the attack and defense situation map in the map display area of the attack and defense test display template; to select test data from the information elements, and to display the test data in the test data display area of the attack and defense test display template.
[0174] B18. In the device as described in B14, the display module is further used to determine that the information display template is an attack and defense actual combat display template when the network attack and defense mode is an actual combat mode; to display the attack and defense situation map in the map display area of the attack and defense actual combat display template; to select actual combat data from the information elements, and to display the actual combat data in the actual combat data display area of the attack and defense actual combat display template.
[0175] Other embodiments or specific implementations of the network attack and defense information display device of the present invention can refer to the above-mentioned method embodiments and will not be described in detail here.
[0176] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or system including the element.
[0177] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.
[0178] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as a read-only memory / random access memory, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present invention.
[0179] The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.
Claims
1. A method for displaying network attack and defense information, characterized in that: The method comprises: In the process of conducting network attack and defense through the network attack and defense range platform, obtain information elements of network attack and defense; Overlaying the information elements with the target virtual scene map to construct an attack and defense situation map; The attack and defense situation map and the information elements are dynamically displayed on the display interface.
2. The method according to claim 1, characterized in that The step of superimposing the information elements with the target virtual scene map to construct an attack and defense situation map includes: Matching a target virtual scene map according to a network attack and defense mode, and obtaining target information elements from the information elements according to the network attack and defense mode; The target information elements are superimposed on the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
3. The method according to claim 2, characterized in that The step of superimposing the target information elements with the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode includes: Determine the attacker information and defender information in the network attack and defense according to the target information element; The attacker information is superimposed on the attacker area in the target virtual scene map, and the defender information is superimposed on the defender area in the target virtual scene map to construct an attack and defense situation map corresponding to the network attack and defense mode.
4. The method according to any one of claims 1 to 3, characterized in that: The dynamically displaying the attack and defense situation map and the information elements on the display interface includes: Determine information display templates based on network attack and defense models; The attack and defense situation diagram and the information elements are dynamically displayed on a display interface through the information display template.
5. The method according to claim 4, characterized in that The dynamically displaying the attack and defense situation map and the information elements on the display interface through the information display template includes: When the network attack and defense mode is a training mode, determining the information display template to be an attack and defense training display template; Displaying the attack and defense situation map in the map display area of the attack and defense training display template; Attack and defense training data are selected from the information elements, and the attack and defense training data are displayed in the training data display area of the attack and defense training display template.
6. The method according to claim 4, characterized in that The dynamically displaying the attack and defense situation map and the information elements on the display interface through the information display template includes: When the network attack and defense mode is a competitive mode, determining the information display template to be an attack and defense competitive display template; Displaying the attack and defense situation map in the map display area of the attack and defense competition display template; The competitive data is selected from the information elements, and the competitive data is displayed in the competitive data display area in the offensive and defensive competitive display template.
7. The method according to claim 4, characterized in that The dynamically displaying the attack and defense situation map and the information elements on the display interface through the information display template includes: When the network attack and defense mode is the test mode, determining the information display template to be an attack and defense test display template; Displaying the attack and defense situation map in the map display area of the attack and defense test display template; Experimental data are selected from the information elements, and the experimental data are displayed in the experimental data display area in the attack and defense experiment display template.
8. A network attack and defense information display device, characterized in that: The device comprises: An acquisition module is used to acquire information elements of network attack and defense during the process of network attack and defense through the network attack and defense range platform; A construction module, used to superimpose the information elements with the target virtual scene map to construct an attack and defense situation map; The display module is used to dynamically display the attack and defense situation map and the information elements on the display interface.
9. A network attack and defense information display device, characterized in that: The device includes: a memory, a processor, and a network attack and defense information display program stored in the memory and executable on the processor, wherein the network attack and defense information display program is configured to implement the steps of the network attack and defense information display method as described in any one of claims 1 to 7.
10. A storage medium, characterized in that: The storage medium stores a network attack and defense information display program, and when the network attack and defense information display program is executed by the processor, the steps of the network attack and defense information display method according to any one of claims 1 to 7 are implemented.