Network target range simulation method, device and equipment based on multiple parameters and medium
By analyzing the service protocol to generate fingerprint information and configuration parameters, the target machine service is simulated, which solves the complex and time-consuming problem of traditional target machine service deployment, and realizes the rapid simulation of multiple service scenarios and improves testing efficiency.
Patent Information
- Application Number
- CN202411666450.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-20
- Publication Date
- 2025-02-07
AI Technical Summary
The deployment of traditional target machine services is complex and time-consuming, making it difficult to support automation and rapid iteration, especially when repeated deployments or parallel testing of multiple different protocol services is required.
By analyzing the characteristic rules of each service agreement, fingerprint information is generated and saved to the preset fingerprint database, the variable parameters are configured using the unified configuration interface, the target service start parameters are generated, different target machine services are simulated, and the target machine receives them through the target machine Request packets and construct response packets to complete network shooting range simulation.
It greatly reduces the links and time of manual deployment, simplifies environment construction, improves testing efficiency, and can quickly simulate multiple different service scenarios.
Smart Images

Figure CN119402374A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of network security technology, and in particular to a multi-parameter based network range simulation method, device, equipment and medium. Background Art
[0002] In the traditional testing process, in order to evaluate the detection effect of the scanner (such as vulnerability scanners, penetration testing tools, etc.), testers need to build multiple different target services. Each target service usually involves complex deployment steps, such as configuring the server environment, installing corresponding services (such as Redis (Remote Dictionary Server, i.e. remote dictionary service), MySQL (a relational database), etc.), adjusting service versions and parameters, etc. These operations are time-consuming and error-prone, especially when repeated deployment or parallel testing of multiple different protocol services is required, it is difficult to effectively support automation and rapid iteration.
[0003] From the above, it can be seen that how to quickly build a target drone service and reduce the construction cost is an urgent problem to be solved. Summary of the invention
[0004] In view of this, the purpose of the present invention is to provide a multi-parameter network range simulation method, device, equipment and medium, which can quickly simulate multiple different service scenarios, greatly reduce the links and time of manual deployment, simplify the environment construction, and thus improve the test efficiency. The specific scheme is as follows:
[0005] In a first aspect, the present application provides a multi-parameter based network range simulation method, comprising:
[0006] Analyze each service agreement to obtain corresponding feature rules, generate corresponding fingerprint information based on the feature rules, and save the fingerprint information to a preset fingerprint database;
[0007] Utilizing a unified configuration interface to configure the variable parameters in each of the fingerprint information to obtain corresponding target service startup parameters, and simulating different target machine services based on the target service startup parameters;
[0008] The target drone receives the corresponding request packet, and analyzes the request packet based on the preset service protocol specification to obtain the corresponding analysis result;
[0009] Based on the analysis result, the corresponding target fingerprint information is obtained from the preset fingerprint database, and a response packet is constructed using the target fingerprint information and the target service startup parameters to complete the corresponding network range simulation operation.
[0010] Optionally, analyzing each service agreement to obtain a corresponding feature rule, generating corresponding fingerprint information based on the feature rule, and saving the fingerprint information to a preset fingerprint database includes:
[0011] Analyze each service protocol to obtain characteristic rules including version information, request format information, and response behavior information;
[0012] Corresponding fingerprint information is generated based on the feature rules, and the fingerprint information is stored in a preset fingerprint database using a hash algorithm or a preset rule matching technology.
[0013] Optionally, the analyzing each service agreement to obtain a corresponding characteristic rule includes:
[0014] Analyze each of the service protocols using a preset protocol analysis tool to obtain corresponding feature rules;
[0015] Among them, different preset protocol analysis tools are designed for different service protocols.
[0016] Optionally, the configuring the variable parameters in each of the fingerprint information using a unified configuration interface to obtain corresponding target service startup parameters includes:
[0017] The variable parameters including the operating system version information, component service type information, version information, port information, and character description information in the fingerprint information are configured to obtain corresponding target service startup parameters.
[0018] Optionally, the configuring the variable parameters in each of the fingerprint information using a unified configuration interface to obtain corresponding target service startup parameters includes:
[0019] The variable parameters in each of the fingerprint information are configured through a preset graphical interface or a preset command line interface to obtain corresponding target service startup parameters.
[0020] Optionally, receiving a corresponding request packet through a target machine, and analyzing the request packet based on a preset service protocol specification to obtain a corresponding analysis result, includes:
[0021] Receiving a corresponding request packet through a target drone, and analyzing the request packet based on a preset service protocol specification;
[0022] Correspondingly, the obtaining corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and constructing a response packet using the target fingerprint information and the target service startup parameter, includes:
[0023] If the target service request corresponding to the request packet meets the preset service protocol specification, the corresponding target fingerprint information is obtained from the preset fingerprint database, and a response packet is constructed using the target fingerprint information and the target service startup parameter.
[0024] Optionally, if the target service request corresponding to the request packet meets the preset service protocol specification, obtaining the corresponding target fingerprint information from the preset fingerprint database, and constructing a response packet using the target fingerprint information and the target service startup parameter, including:
[0025] If the target service request corresponding to the request packet meets the preset service protocol specification, determining the target service protocol corresponding to the request packet, and determining the target fingerprint information corresponding to the target service protocol from the preset fingerprint database based on the target service protocol;
[0026] The variable parameters in the target fingerprint information are replaced by the target service startup parameters to construct a response packet.
[0027] In a second aspect, the present application provides a multi-parameter based network range simulation device, comprising:
[0028] A service agreement analysis module, used to analyze each service agreement to obtain corresponding feature rules, generate corresponding fingerprint information based on the feature rules, and save the fingerprint information to a preset fingerprint database;
[0029] A parameter configuration module, used to configure the variable parameters in each of the fingerprint information using a unified configuration interface to obtain corresponding target service startup parameters, and simulate different target machine services based on the target service startup parameters;
[0030] The request packet analysis module is used to receive the corresponding request packet through the target machine, and analyze the request packet based on the preset service protocol specification to obtain the corresponding analysis result;
[0031] The range simulation module is used to obtain the corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and construct a response packet using the target fingerprint information and the target service startup parameters to complete the corresponding network range simulation operation.
[0032] In a third aspect, the present application provides an electronic device, including:
[0033] Memory, used to store computer programs;
[0034] A processor is used to execute the computer program to implement the aforementioned multi-parameter-based network range simulation method.
[0035] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program, wherein the computer program, when executed by a processor, implements the aforementioned multi-parameter-based network target range simulation method.
[0036] The present application analyzes each service protocol to obtain the corresponding feature rules, generates corresponding fingerprint information based on the feature rules, and saves the fingerprint information to a preset fingerprint database; configures the variable parameters in each fingerprint information using a unified configuration interface to obtain the corresponding target service startup parameters, and simulates different target machine services based on the target service startup parameters; receives the corresponding request packet through the target machine, and analyzes the request packet based on the preset service protocol specification to obtain the corresponding analysis result; obtains the corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and constructs a response packet using the target fingerprint information and the target service startup parameters to complete the corresponding network range simulation operation. As can be seen from the above, the present application first generates fingerprint information from the feature rules obtained by analyzing each service protocol, and stores the fingerprint information in a preset fingerprint database, then configures the variable parameters in each fingerprint information through a unified configuration interface to obtain the corresponding service startup parameters, then receives the corresponding request packet through the target machine, analyzes the request packet through the preset service protocol specification, and obtains the corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and then constructs a response packet using the target fingerprint information and the target service startup parameters. In this way, by analyzing the fingerprint information obtained from each service protocol and configuring different variable parameters to simulate different target machine services, multiple different service scenarios can be simulated quickly, which greatly reduces the steps and time of manual deployment, simplifies the environment construction, and thus improves testing efficiency. BRIEF DESCRIPTION OF THE DRAWINGS
[0037] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.
[0038] Figure 1 A flow chart of a multi-parameter based network range simulation method disclosed in this application;
[0039] Figure 2 A schematic diagram of a traditional target drone service simulation disclosed in this application;
[0040] Figure 3 A schematic diagram of a target drone service simulation disclosed in this application;
[0041] Figure 4 A schematic diagram of a target drone simulation provided for this application;
[0042] Figure 5 This is a schematic diagram of the structure of a multi-parameter network range simulation device disclosed in this application;
[0043] Figure 6 This is a structural diagram of an electronic device disclosed in this application. DETAILED DESCRIPTION
[0044] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0045] At present, in order to evaluate the detection effect of the scanner, testers need to set up multiple different target machine services. Each target machine service usually involves complex deployment steps, such as configuring the server environment, installing the corresponding services, adjusting the service version and parameters, etc., which is time-consuming and error-prone, especially when repeated deployment or parallel testing of multiple different protocol services is required. It is difficult to effectively support automation and rapid iteration. To this end, the present application provides a multi-parameter-based network target range simulation method that can quickly simulate multiple different service scenarios, greatly reducing the links and time of manual deployment, simplifying the environment setup, and thus improving testing efficiency.
[0046] See also Figure 1 As shown, the embodiment of the present invention discloses a multi-parameter based network range simulation method, comprising:
[0047] Step S11: Analyze each service agreement to obtain corresponding feature rules, generate corresponding fingerprint information based on the feature rules, and save the fingerprint information to a preset fingerprint database.
[0048] In this embodiment, various common service protocols (such as MySQL, Redis, Nginx (engine x, an open source HTTP (Hyper Text Transfer Protocol, i.e., Hypertext Transfer Protocol) and reverse proxy server)) are analyzed to collect characteristic rules in the protocols. Specifically, the analysis of each service protocol to obtain corresponding characteristic rules, and the generation of corresponding fingerprint information based on the characteristic rules, and the storage of the fingerprint information in a preset fingerprint database include: analyzing each service protocol to obtain characteristic rules including version information, request format information, and response behavior information; generating corresponding fingerprint information based on the characteristic rules, and storing the fingerprint information in a preset fingerprint database using a hash algorithm or a preset rule matching technology.
[0049] It is understandable that a network packet capture tool (such as Wireshark (i.e., network packet analysis software)) can be used for in-depth analysis to mine key fields of different protocols (such as headers, status codes, handshake mechanisms, etc.). When extracting features, not only the standard part of the protocol is focused on, but also the subtle differences between different implementation versions need to be considered. For example, different versions of the same service may differ in response time, header order, status code meaning, etc. In the process of analyzing each of the service protocols, the characteristic rules of each of the service protocols are extracted and the fingerprint information is generated, and each of the fingerprint information can help determine the specific version or implementation of the service. The generation of the fingerprint information can be based on request-response pattern analysis, that is, fingerprint information is generated by analyzing the data characteristics of network requests and responses. It is worth mentioning that a hash algorithm or rule matching technology can be used to store the key parts corresponding to the characteristic rules of the service protocol in the preset fingerprint database. The preset fingerprint database not only contains basic request and response rules, but also can store special behaviors under specific services, such as behaviors for handling exceptions and behaviors using timeout mechanisms.
[0050] Furthermore, the preset protocol analysis tool used to analyze each of the service protocols can adopt a plug-in architecture, and independent protocol analysis plug-ins can be designed for different service protocols. Specifically, the analysis of each service protocol to obtain corresponding feature rules includes: using a preset protocol analysis tool to analyze each of the service protocols to obtain corresponding feature rules; wherein different preset protocol analysis tools are designed for different service protocols. It should be pointed out that each of the protocol analysis plug-ins is specifically responsible for the analysis and feature extraction of one or more of the service protocols, and the support for subsequent new services or protocols can be expanded by adding plug-ins without modifying the core code of the existing module.
[0051] Step S12: Utilize a unified configuration interface to configure the variable parameters in each of the fingerprint information to obtain corresponding target service startup parameters, and simulate different target machine services based on the target service startup parameters.
[0052] In this embodiment, a unified configuration interface is used to configure the variable parameters in each of the fingerprint information, and different service startup parameters are obtained based on the differences in the variable parameters. Specifically, the use of a unified configuration interface to configure the variable parameters in each of the fingerprint information to obtain the corresponding target service startup parameters includes: configuring the variable parameters including the operating system version information, component service type information, version information, port information, and character class description information in the fingerprint information to obtain the corresponding target service startup parameters. It should be pointed out that the variable parameters include but are not limited to the operating system version, component service type, version, port, and banner information (i.e., character class description information).
[0053] It is understandable that after configuring the variable parameters, the target service startup parameters are obtained, and different target machine services are simulated based on the target service startup parameters. The user end can customize the variable parameters in the target machine service, and support dynamic adjustment of parameters such as operating system version, service protocol, service version, port and banner information. In order to enhance flexibility, it also supports parameter input in formats such as JSON (JavaScript Object Notation, a lightweight data exchange format) and YAML (YAML Ain't Markup Language, a markup language), so that the user end can quickly load or import different target machine environment templates. In addition, in addition to configuring the basic service startup parameters, it also supports setting advanced parameters such as the service's concurrent request processing capability, maximum number of connections, and timeout mechanism to meet the simulation requirements of complex environments.
[0054] It is worth mentioning that Figure 2 It is a traditional target machine service simulation diagram. In the traditional test process, in order to evaluate the detection effect of the scanner, the tester needs to build multiple different target machine services, where the scanner to be evaluated can be a vulnerability scanner or a penetration testing tool. Each target machine service usually involves complex deployment steps, such as configuring the server environment, installing corresponding services (such as redis, Redis, MySQL, etc.), adjusting service versions and parameters, etc. These operations are time-consuming and error-prone, especially when repeated deployment or parallel testing of multiple different service protocol services is required, it is difficult to effectively support automation and rapid iteration. This embodiment realizes one-time configuration and deployment of the target machine service, which can quickly simulate multiple different service scenarios. Figure 3It is a target machine service simulation diagram. This design allows testers to select different services, protocols, versions and ports according to their needs through a unified configuration interface, and the system automatically completes the simulation initialization of the service. It also supports batch configuration and management through scripting or API (Application Programming Interface) calls, which can be seamlessly integrated into the continuous integration process and is suitable for large-scale testing scenarios.
[0055] In this embodiment, the use of a unified configuration interface to configure the variable parameters in each of the fingerprint information to obtain the corresponding target service startup parameters includes: configuring the variable parameters in each of the fingerprint information through a preset graphical interface or a preset command line interface to obtain the corresponding target service startup parameters. In a specific implementation, the code for configuring the variable parameters in each of the fingerprint information to obtain the target service startup parameters is as follows:
[0056] {
[0057] "name":"redis",
[0058] "port": 6379,
[0059] "version":"5.0.0",
[0060] "banner":{
[0061] "version":"5.0.0",
[0062] "data":"redis test",
[0063] "logo":"redis",
[0064] },
[0065] "action":[
[0066] {
[0067] "type":"response",
[0068] "rules":{
[0069] "PING\r\n":"+PONG\r\n",
[0070] "INFO\r\n":"redis_version:5.0.0",
[0071] "VERSION\r\n":"Redis server v5.0.0",
[0072] },
[0073] "data":"value",
[0074] } ]
[0076] }
[0077] It is understandable that by providing a graphical interface or CLI (Command-Line Interface) interface, the user can easily set parameters, select different service protocols, set ports, etc. through the interface, and the system will automatically generate corresponding configuration files. It should be pointed out that the configuration process of the variable parameters also has a parameter verification function to ensure that the value entered by the user meets the parameter requirements of a specific service, such as the version number format of Redis or the rationality of the port range.
[0078] Step S13: receiving the corresponding request packet through the target machine, and analyzing the request packet based on the preset service protocol specification to obtain a corresponding analysis result.
[0079] In this embodiment, after the target machine receives a request packet for a service request, the request packet is analyzed based on a preset service protocol specification. Specifically, the process of analyzing the request packet involves analyzing the request line, request header, and request body in the target service request corresponding to the request packet, and judging whether the target service request complies with the preset service protocol specification based on the obtained analysis result; wherein, the preset service protocol specification includes an existing service protocol specification.
[0080] Step S14: based on the analysis result, corresponding target fingerprint information is obtained from the preset fingerprint database, and a response packet is constructed using the target fingerprint information and the target service startup parameter to complete the corresponding network range simulation operation.
[0081] In this embodiment, if the target service request corresponding to the request packet complies with the preset service protocol specification, the corresponding target fingerprint information is obtained from the preset fingerprint database, and a response packet is constructed using the target fingerprint information and the target service startup parameters; if the target service request corresponding to the request packet does not comply with the preset service protocol specification, a prompt box indicating that the target service request corresponding to the request packet is incorrect is displayed on the preset display interface.
[0082] It can be understood that if the target service request corresponding to the request packet meets the preset service protocol specification, the corresponding target fingerprint information is obtained from the preset fingerprint database, and the target fingerprint information and the target service startup parameter are used to construct a response packet, including: if the target service request corresponding to the request packet meets the preset service protocol specification, the target service protocol corresponding to the request packet is determined, and based on the target service protocol, the target fingerprint information corresponding to the target service protocol is determined from the preset fingerprint database; the variable parameters in the target fingerprint information are replaced with the target service startup parameters to construct a response packet. If the target service protocol is a complex protocol, the state change of the service can be simulated for the complex protocol to ensure consistency with the behavior of the actual service. For example, for the simulation of Redis, the "state" of the server can be modified according to the received command, thereby changing the subsequent response packet content.
[0083] Furthermore, after determining that the target service request corresponds to the request packet, if the target service request complies with the preset service protocol specification, the target service protocol is obtained based on the target service request, and the target service protocol is used to obtain the target fingerprint information corresponding to the target service protocol from the preset fingerprint database, and then the configured variable parameters are placed in the target fingerprint information for combination, and the obtained combined information is the constructed response packet.
[0084] As can be seen from the above, the present application first generates fingerprint information based on the characteristic rules obtained by analyzing each service protocol, and stores the fingerprint information in a preset fingerprint database, and then configures the variable parameters in each fingerprint information through a unified configuration interface to obtain the corresponding service startup parameters, and then receives the corresponding request packet through the target machine, analyzes the request packet through the preset service protocol specification, and obtains the corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and then constructs a response packet using the target fingerprint information and the target service startup parameters. In this way, by analyzing the fingerprint information obtained from each service protocol and configuring different variable parameters to simulate different target machine services, multiple different service scenarios can be quickly simulated, which greatly reduces the links and time of manual deployment, simplifies the environment construction, and thus improves the test efficiency.
[0085] Figure 4A target machine simulation schematic diagram provided for this embodiment, the target machine simulation device is divided into a data collection module, a parameter configuration module and a service simulation module. Among them, the data collection module first analyzes each common service protocol, obtains the characteristic rules of the service protocol, and generates fingerprint information based on the characteristic rules, and then collects each of the fingerprint information through a preset packet capture tool and stores it in a preset fingerprint database; the parameter configuration module allows the user end to configure different variable parameters as needed, so as to set different simulation service startup items based on the obtained service startup parameters to simulate different target machine services; the service simulation module selects the required service protocol through a unified configuration interface, configures the variable parameters, and the system generates a corresponding simulation environment, and all simulation services are run in a service main program, rather than a separate virtual machine or container, which significantly reduces the demand for server resources. Through the characteristic rules collected in advance, the device can simulate real network interactions without actually deploying services, thereby greatly reducing the use of physical servers. It also supports simultaneous simulation or simultaneous testing of multiple service protocols, and can be flexibly expanded. In addition, simulated delays, error rates, etc. can be added to certain services to realistically restore the uncertainty in the real network environment.
[0086] Accordingly, see Figure 5 As shown, the present application also provides a shooting range simulation device based on multiple parameters, comprising:
[0087] The service agreement analysis module 11 is used to analyze each service agreement to obtain corresponding feature rules, generate corresponding fingerprint information based on the feature rules, and save the fingerprint information to a preset fingerprint database;
[0088] The parameter configuration module 12 is used to configure the variable parameters in each of the fingerprint information using a unified configuration interface to obtain corresponding target service startup parameters, and simulate different target machine services based on the target service startup parameters;
[0089] The request packet analysis module 13 is used to receive the corresponding request packet through the target machine, and analyze the request packet based on the preset service protocol specification to obtain the corresponding analysis result;
[0090] The range simulation module 14 is used to obtain the corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and construct a response packet using the target fingerprint information and the target service startup parameters to complete the corresponding network range simulation operation.
[0091] As can be seen from the above, the present application first generates fingerprint information based on the characteristic rules obtained by analyzing each service protocol, and stores the fingerprint information in a preset fingerprint database, and then configures the variable parameters in each fingerprint information through a unified configuration interface to obtain the corresponding service startup parameters, and then receives the corresponding request packet through the target machine, analyzes the request packet through the preset service protocol specification, and obtains the corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and then constructs a response packet using the target fingerprint information and the target service startup parameters. In this way, by analyzing the fingerprint information obtained from each service protocol and configuring different variable parameters to simulate different target machine services, multiple different service scenarios can be quickly simulated, which greatly reduces the links and time of manual deployment, simplifies the environment construction, and thus improves the test efficiency.
[0092] In some specific implementations, the service agreement analysis module 11 may specifically include:
[0093] The protocol analysis unit is used to analyze each service protocol to obtain characteristic rules including version information, request format information, and response behavior information;
[0094] The fingerprint information generating unit is used to generate corresponding fingerprint information based on the feature rule, and store the fingerprint information in a preset fingerprint database by using a hash algorithm or a preset rule matching technology.
[0095] In some specific implementations, the multi-parameter-based shooting range simulation device may further include:
[0096] The protocol analysis completion unit is used to analyze each of the service protocols using a preset protocol analysis tool to obtain corresponding feature rules.
[0097] In some specific implementations, the service agreement analysis module 11 may specifically include:
[0098] The parameter configuration completion unit is used to configure the variable parameters including the operating system version information, component service type information, version information, port information, and character description information in the fingerprint information to obtain the corresponding target service startup parameters.
[0099] In some specific implementations, the parameter configuration module 12 may specifically include:
[0100] The target parameter determination unit is used to configure the variable parameters in each of the fingerprint information through a preset graphical interface or a preset command line interface to obtain the corresponding target service startup parameters.
[0101] In some specific implementations, the request packet analysis module 13 may specifically include:
[0102] A request packet acquisition unit, used to receive a corresponding request packet through a target drone, and analyze the request packet based on a preset service protocol specification;
[0103] Accordingly, the shooting range simulation module 14 may specifically include:
[0104] The response packet construction unit is used to obtain corresponding target fingerprint information from the preset fingerprint database if the target service request corresponding to the request packet meets the preset service protocol specification, and construct a response packet using the target fingerprint information and the target service startup parameter.
[0105] In some specific implementations, the shooting range simulation module 13 may specifically include:
[0106] a target protocol determining unit, configured to determine the target service protocol corresponding to the request packet if the target service request corresponding to the request packet conforms to the preset service protocol specification, and determine the target fingerprint information corresponding to the target service protocol from the preset fingerprint database based on the target service protocol;
[0107] The parameter replacement unit is used to replace the variable parameters in the target fingerprint information with the target service startup parameters to construct a response packet.
[0108] Furthermore, the present application also discloses an electronic device. Figure 6 This is a structural diagram of an electronic device 20 shown according to an exemplary embodiment, and the content in the figure cannot be regarded as any limitation on the scope of use of this application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, and the computer program is loaded and executed by the processor 21 to implement the relevant steps in the multi-parameter-based range simulation method disclosed in any of the aforementioned embodiments. In addition, the electronic device 20 in this embodiment may specifically be an electronic computer.
[0109] In this embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device, and the communication protocol it follows is any communication protocol that can be applied to the technical solution of the present application, and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs and is not specifically limited here.
[0110] In addition, the memory 22 as a carrier for resource storage may be a read-only memory, a random access memory, a disk or an optical disk, etc. The resources stored thereon may include an operating system 221, a computer program 222, etc., and the storage method may be temporary storage or permanent storage.
[0111] The operating system 221 is used to manage and control the hardware devices and computer program 222 on the electronic device 20, and can be Windows Server, Netware, Unix, Linux, etc. In addition to the computer program that can be used to complete the multi-parameter-based range simulation method performed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include computer programs that can be used to complete other specific tasks.
[0112] Furthermore, the present application also discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the aforementioned multi-parameter-based shooting range simulation method is implemented. The specific steps of the method can refer to the corresponding contents disclosed in the aforementioned embodiments, and will not be repeated here.
[0113] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.
[0114] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.
[0115] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.
[0116] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.
[0117] The technical solution provided by the present application is introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for general technicians in this field, according to the idea of the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.
Claims
1. A multi-parameter network range simulation method, characterized in that: include: Analyze each service agreement to obtain corresponding feature rules, generate corresponding fingerprint information based on the feature rules, and save the fingerprint information to a preset fingerprint database; Utilizing a unified configuration interface to configure the variable parameters in each of the fingerprint information to obtain corresponding target service startup parameters, and simulating different target machine services based on the target service startup parameters; The target drone receives the corresponding request packet, and analyzes the request packet based on the preset service protocol specification to obtain the corresponding analysis result; Based on the analysis result, the corresponding target fingerprint information is obtained from the preset fingerprint database, and a response packet is constructed using the target fingerprint information and the target service startup parameters to complete the corresponding network range simulation operation.
2. The multi-parameter network range simulation method according to claim 1, characterized in that: The analyzing each service agreement to obtain corresponding feature rules, generating corresponding fingerprint information based on the feature rules, and saving the fingerprint information to a preset fingerprint database includes: Analyze each service protocol to obtain characteristic rules including version information, request format information, and response behavior information; Corresponding fingerprint information is generated based on the feature rules, and the fingerprint information is stored in a preset fingerprint database using a hash algorithm or a preset rule matching technology.
3. The multi-parameter network range simulation method according to claim 1 is characterized in that: The analysis of each service agreement to obtain corresponding characteristic rules includes: Analyze each of the service protocols using a preset protocol analysis tool to obtain corresponding feature rules; Among them, different preset protocol analysis tools are designed for different service protocols.
4. The multi-parameter network range simulation method according to claim 1, characterized in that: The use of a unified configuration interface to configure the variable parameters in each of the fingerprint information to obtain corresponding target service startup parameters includes: The variable parameters including the operating system version information, component service type information, version information, port information, and character description information in the fingerprint information are configured to obtain corresponding target service startup parameters.
5. The multi-parameter network range simulation method according to claim 1, characterized in that: The use of a unified configuration interface to configure the variable parameters in each of the fingerprint information to obtain corresponding target service startup parameters includes: The variable parameters in each of the fingerprint information are configured through a preset graphical interface or a preset command line interface to obtain corresponding target service startup parameters.
6. The multi-parameter network range simulation method according to any one of claims 1 to 5, characterized in that: The receiving of the corresponding request packet through the target drone and analyzing the request packet based on the preset service protocol specification to obtain the corresponding analysis result include: Receiving a corresponding request packet through a target drone, and analyzing the request packet based on a preset service protocol specification; Correspondingly, the obtaining corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and constructing a response packet using the target fingerprint information and the target service startup parameter, includes: If the target service request corresponding to the request packet meets the preset service protocol specification, the corresponding target fingerprint information is obtained from the preset fingerprint database, and a response packet is constructed using the target fingerprint information and the target service startup parameter.
7. The multi-parameter network range simulation method according to claim 6 is characterized in that: If the target service request corresponding to the request packet meets the preset service protocol specification, the corresponding target fingerprint information is obtained from the preset fingerprint database, and a response packet is constructed using the target fingerprint information and the target service startup parameter, including: If the target service request corresponding to the request packet meets the preset service protocol specification, determining the target service protocol corresponding to the request packet, and determining the target fingerprint information corresponding to the target service protocol from the preset fingerprint database based on the target service protocol; The variable parameters in the target fingerprint information are replaced by the target service startup parameters to construct a response packet.
8. A shooting range simulation device based on multiple parameters, characterized in that: include: A service agreement analysis module, used to analyze each service agreement to obtain corresponding feature rules, generate corresponding fingerprint information based on the feature rules, and save the fingerprint information to a preset fingerprint database; A parameter configuration module, used to configure the variable parameters in each of the fingerprint information using a unified configuration interface to obtain corresponding target service startup parameters, and simulate different target machine services based on the target service startup parameters; The request packet analysis module is used to receive the corresponding request packet through the target machine, and analyze the request packet based on the preset service protocol specification to obtain the corresponding analysis result; The range simulation module is used to obtain the corresponding target fingerprint information from the preset fingerprint database based on the analysis result, and construct a response packet using the target fingerprint information and the target service startup parameters to complete the corresponding network range simulation operation.
9. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor is used to execute the computer program to implement the multi-parameter based network range simulation method as described in any one of claims 1 to 7.
10. A computer-readable storage medium, characterized in that: Used to store a computer program, wherein when the computer program is executed by a processor, the multi-parameter-based network range simulation method according to any one of claims 1 to 7 is implemented.
Citation Information
Cited By
Dynamic evolution password practical training range system and password practical training scene generation method
CN120263566A
Dynamic Evolution of Password Training Range System and Method for Generating Password Training Scenarios
CN120263566B
Terminal testing method and device, equipment and storage medium
CN120979993A