Competition management method and device of network security CTF platform and computer equipment

Abstract

The invention relates to a competition management method and device of a network security CTF platform and computer equipment. The method comprises the following steps: in response to a match adding instruction for a match creation interface of a network security CTF platform, adding a target match corresponding to the match adding instruction to a match list in the match creation interface; in response to a match configuration instruction for a target match in the match list, acquiring match configuration information input by the match configuration instruction; and under the condition that the match configuration information passes verification, generating match identification information of the target match, taking the match identification information as a primary key of the match configuration information, and writing the match configuration information into a match database of the network security CTF platform. By adopting the method, a platform does not need to be additionally deployed for the match needing to be added, multiple matches can be deployed in the network security CTF platform, so that the multiple matches can be accurately and effectively managed by utilizing the network security CTF platform, and the match management efficiency of the network security CTF platform is further improved.

Description

Technical Field

[0001] The present application relates to the field of Internet technology, and in particular to a competition management method, apparatus, computer equipment, computer-readable storage medium, and computer program product for a network security CTF platform. Background Art

[0002] With the rapid development of network security, especially the practice and application of network attack and defense and CTF technology, by simulating real network attack and defense scenarios, the CTF platform can provide a platform for network security technicians to compete and practice, so as to improve their technical level and practical ability.

[0003] Traditional technologies require the deployment of multiple platforms to conduct multiple competitions, which wastes resources and makes competition management difficult, and is not conducive to improving the competition management efficiency of the cybersecurity CTF platform. Summary of the invention

[0004] Based on this, it is necessary to provide a competition management method, device, computer equipment, computer-readable storage medium and computer program product for a network security CTF platform that can improve the competition management efficiency of the network security CTF platform in response to the above technical problems.

[0005] In a first aspect, the present application provides a method for managing a competition on a network security CTF platform, including:

[0006] In response to an event adding instruction on an event creation interface of a cybersecurity CTF platform, adding a target event corresponding to the event adding instruction to an event list in the event creation interface; the event list includes at least one event;

[0007] In response to a competition configuration instruction for a target competition in the competition list, obtaining competition configuration information input by the competition configuration instruction; the competition configuration information is used to characterize the name, type, start and end time, and competition result display position of the target competition;

[0008] When the event configuration information passes the verification, the event identification information of the target event is generated, the event identification information is used as the primary key of the event configuration information, and the event configuration information is written into the event database of the network security CTF platform; the event database is used to set the event configuration of the target event in the network security CTF platform according to the event configuration information.

[0009] In one embodiment, the event configuration information includes event name information, and the event configuration information is verified, including:

[0010] Get the text length of the event name information;

[0011] When the text length meets the preset text length requirement and the event name information meets the preset text format requirement, it is determined that the event name information passes the verification.

[0012] In one embodiment, the event configuration information includes start time information and end time information; the event configuration information is verified, including:

[0013] Determine the duration of the event according to the start time information and the end time information;

[0014] When the event duration period is within a preset time range, it is determined that the start time information and the end time information are verified.

[0015] In one embodiment, the method further comprises:

[0016] In response to a question adding instruction for the event creation interface, displaying a question editing interface for the event corresponding to the question adding instruction;

[0017] In response to a question editing instruction for the question editing interface, obtaining question information input by the question editing instruction;

[0018] When the title information passes the verification, the event identification information of the event corresponding to the title adding instruction is used as the primary key of the title information, and the title information is written into the event database; the event database is used to generate the event title of the event corresponding to the title adding instruction in the network security CTF platform according to the title information.

[0019] In one of the embodiments, the topic information includes topic type information, and the topic information passes verification, including: when the topic type information is the same as any topic type in a preset topic type set, determining that the topic type information passes verification.

[0020] In one embodiment, the method further comprises:

[0021] If the event configuration information fails to pass the verification, generating first prompt information and displaying the first prompt information; the first prompt information is used to prompt the user to modify the event configuration information;

[0022] and / or,

[0023] If the title information fails to pass the verification, second prompt information is generated and displayed; the second prompt information is used to prompt the user to modify the title information.

[0024] In a second aspect, the present application also provides a competition management device for a network security CTF platform, including:

[0025] A competition adding module, for responding to a competition adding instruction on a competition creation interface of a cybersecurity CTF platform, and adding a target competition corresponding to the competition adding instruction to a competition list in the competition creation interface; the competition list includes at least one competition;

[0026] A competition configuration module, for responding to a competition configuration instruction for a target competition in the competition list, and obtaining competition configuration information input by the competition configuration instruction; the competition configuration information is used to characterize the name, type, start and end time and competition result display position of the target competition;

[0027] The information storage module is used to generate the event identification information of the target event when the event configuration information passes the verification, use the event identification information as the primary key of the event configuration information, and write the event configuration information into the event database of the network security CTF platform; the event database is used to set the event configuration of the target event in the network security CTF platform according to the event configuration information.

[0028] In a third aspect, the present application further provides a computer device, wherein the computer device comprises a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the steps of the above method are implemented.

[0029] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of the above method when executed by a processor.

[0030] In a fifth aspect, the present application further provides a computer program product, wherein the computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the above method are implemented.

[0031] The event management method, apparatus, computer equipment, computer-readable storage medium and computer program product of the above-mentioned network security CTF platform add a target event corresponding to the event addition instruction to the event list in the event creation interface in response to an event addition instruction for the network security CTF platform; the event list includes at least one event, so that the event is accurately added to the event list based on the event addition instruction; in response to an event configuration instruction for the target event in the event list, the event configuration information input by the event configuration instruction is obtained; the event configuration information is used to characterize the name, type, start and end time and event result display position of the target event, so that the event configuration information is accurately obtained based on the event configuration instruction; when the event configuration information passes the verification, the event identification information of the target event is generated, and the event identification information is used as the event configuration information. The primary key of the information is used, and the event configuration information is written into the event database of the network security CTF platform; the event database is used to set the event configuration of the target event in the network security CTF platform according to the event configuration information, so as to verify the event configuration information, and store the event configuration information in the event database with the event identifier as the primary key of the event configuration information to set the event configuration, and can accurately obtain the event configuration information of the event to be added based on the instructions triggered by the user, and when the event configuration information passes the verification, the event configuration information is stored in the event database with the event identifier as the primary key of the event configuration information, without the need to deploy an additional platform for the event to be added, so as to realize the deployment of multiple events in the network security CTF platform, so as to use the network security CTF platform to accurately and effectively manage multiple events, thereby improving the event management efficiency of the network security CTF platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 An application environment diagram of a competition management method for a network security CTF platform in an embodiment;

[0034] Figure 2 A schematic diagram of a flow chart of a competition management method of a network security CTF platform in an embodiment;

[0035] Figure 3 A schematic diagram of an event creation interface in one embodiment;

[0036] Figure 4A schematic diagram of a competition configuration interface in an embodiment;

[0037] Figure 5 A schematic diagram of a topic editing interface in one embodiment;

[0038] Figure 6 A schematic diagram of a process of creating an event in one embodiment;

[0039] Figure 7 A schematic diagram of a process of creating a topic in one embodiment;

[0040] Figure 8 It is a structural block diagram of a competition management device of a network security CTF platform in one embodiment;

[0041] Fig. 9 The figure is a diagram of the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0042] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0043] The competition management method of the network security CTF platform provided in the embodiment of the present application can be applied to Figure 1In the application environment shown. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. The terminal 102 responds to the event addition instruction for the event creation interface of the network security CTF platform, and adds the target event corresponding to the event addition instruction to the event list in the event creation interface; the event list includes at least one event; the terminal 102 responds to the event configuration instruction for the target event in the event list, and obtains the event configuration information input by the event configuration instruction; the event configuration information is used to characterize the name, type, start and end time and event result display position of the target event; the terminal 102 generates the event identification information of the target event when the event configuration information passes the verification, uses the event identification information as the primary key of the event configuration information, and writes the event configuration information into the event database of the network security CTF platform; the event database is used to set the event configuration of the target event in the network security CTF platform according to the event configuration information. Among them, the terminal 102 can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, Internet of Things devices, and portable wearable devices. The server 104 may be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides cloud computing services.

[0044] In an exemplary embodiment, Figure 2 As shown, a competition management method for a network security CTF platform is provided, and the method is applied to a terminal as an example for explanation, including the following steps S202 to S206. Among them:

[0045] Step S202, in response to an event adding instruction in the event creation interface of the cybersecurity CTF platform, adding a target event corresponding to the event adding instruction to an event list in the event creation interface; the event list includes at least one event.

[0046] Among them, the network security CTF platform can refer to a competition platform. In practical applications, the network security CTF platform can be used to organize Capture The Flag (CTF). Capture The Flag in the field of network security refers to a form of competition in which network security technicians compete in technology.

[0047] The event creation interface may refer to an interface for setting and initializing various parameters of the competition.

[0048] Among them, the event adding instruction may refer to an instruction / command used to create a new event or add new elements (such as new games, teams, players, etc.) to an existing event structure. In actual applications, the event added by the event adding instruction may be used as a target event.

[0049] The event list may refer to a list for displaying events. In practical applications, the event list may include information such as created events and numbers of each event. The number of events in the event list may include but is not limited to 1.

[0050] As an example, Figure 3 As shown, a schematic diagram of an event creation interface is provided. When the terminal displays the event creation interface to the user, when the user needs to create an event, the user can click the "Add" button in the event creation interface, and the terminal can generate an event adding instruction in response to the user clicking the "Add" button. The terminal responds to the event adding instruction of the event creation interface for the network security CTF platform, adds the target event corresponding to the event adding instruction to the event list in the event creation interface, and sets the number of the target event in the event list according to the number of the event that has been created in the event list.

[0051] Step S204, in response to the event configuration instruction for the target event in the event list, obtaining the event configuration information input by the event configuration instruction.

[0052] Among them, the event configuration instructions may refer to instructions / commands used to set and adjust various parameters of the event.

[0053] The event configuration information may refer to information used to characterize the name, type, start and end time, and event result display location of the target event.

[0054] As an example, the user can click the "Event Configuration" button in the event creation interface, and then the terminal can display the event configuration interface to the user, and the user can set the event configuration information in the event configuration interface, such as Figure 4 As shown, a schematic diagram of an event configuration interface is provided, in which a user can input / edit information such as the event name, event type, start time, end time, whether to display the event on the front end, the display location of the event results, and display parameters when displaying the event results in the event configuration interface. The terminal can generate an event configuration instruction in response to the user inputting / editing the event name and other information in the event configuration interface, and obtain the event configuration information input by the event configuration instruction.

[0055] Step S206, when the event configuration information passes the verification, generate event identification information of the target event, use the event identification information as the primary key of the event configuration information, and write the event configuration information into the event database of the network security CTF platform.

[0056] Among them, the event identification information may refer to a unique identifier (UID), which is usually represented by 32 hexadecimal digits (0-9, af, AF), separated into five groups by hyphens (-).

[0057] Among them, the event database may refer to a database used to set the event configuration of the target event in the network security CTF platform according to the event configuration information. In actual applications, the event database may also verify the event configuration information.

[0058] As an example, after obtaining the event configuration information, the terminal can verify the event configuration information to verify whether the event configuration information meets the preset requirements. If the event configuration information meets the preset requirements, the terminal can determine that the event configuration information has passed the verification, and then the terminal can generate the event identification information of the target event according to the preset UID generation method. The terminal can use the event identification information as the primary key of the event configuration information and write the event configuration information into the event database of the network security CTF platform. The event configuration information written into the event database of the network security CTF platform can use the event identification information of the corresponding event as a unique identifier. The event database of the network security CTF platform can set / update the event configuration of the corresponding event in the network security CTF platform according to the event configuration information, such as the event name, event type, start time, end time, whether to display on the front end, the event result display location, and the display parameters when the event results are displayed.

[0059] In the above-mentioned event management method of the network security CTF platform, by responding to an event adding instruction for the event creation interface of the network security CTF platform, the target event corresponding to the event adding instruction is added to the event list in the event creation interface; the event list includes at least one event, so that the event is accurately added to the event list based on the event adding instruction; in response to the event configuration instruction for the target event in the event list, the event configuration information input by the event configuration instruction is obtained; the event configuration information is used to characterize the name, type, start and end time and event result display position of the target event, so that the event configuration information is accurately obtained based on the event configuration instruction; when the event configuration information passes the verification, the event identification information of the target event is generated, the event identification information is used as the primary key of the event configuration information, and the event configuration information is used as the primary key of the event configuration information. The event configuration information is written into the event database of the network security CTF platform; the event database is used to set the event configuration of the target event in the network security CTF platform according to the event configuration information, so as to verify the event configuration information, and store the event configuration information in the event database with the event identifier as the primary key of the event configuration information to set the event configuration, and can accurately obtain the event configuration information of the event to be added based on the user-triggered instructions, and when the event configuration information passes the verification, store the event configuration information in the event database with the event identifier as the primary key of the event configuration information, without the need to deploy an additional platform for the event to be added, so as to realize the deployment of multiple events in the network security CTF platform, so as to use the network security CTF platform to accurately and effectively manage multiple events, thereby improving the event management efficiency of the network security CTF platform.

[0060] In an exemplary embodiment, the event configuration information includes event name information, and the event configuration information passes verification, including: obtaining the text length of the event name information; when the text length meets a preset text length requirement and the event name information meets a preset text format requirement, determining that the event name information passes verification.

[0061] The event name information may refer to information representing the name of the event.

[0062] The text length of the event name information may refer to the number of characters in the event name information, including letters, numbers, symbols, and spaces.

[0063] Among them, the preset text length requirement may include that the text length of the event name information does not exceed a preset length threshold, etc.

[0064] The preset text format requirement may include, but is not limited to, that the event name information does not contain preset characters.

[0065] As an example, the event configuration information may include event name information. After the terminal obtains the event name information, it can analyze whether the text length of the event name information exceeds the preset length threshold and whether the event name information contains preset characters. If the text length of the event name information does not exceed the preset length threshold and the event name information does not contain preset characters, the terminal can determine that the event name information has passed the verification. If the text length of the event name information exceeds the preset length threshold or the event name information contains preset characters, the terminal can determine that the event name information has not passed the verification. In actual applications, the terminal can also compare the event names of the events created in the network security CTF platform with the event name information of the target event to be added one by one to ensure that the event name of the target event to be added is not the same as the event name of the event that has been created.

[0066] In this embodiment, by obtaining the text length of the event name information; when the text length meets the preset text length requirement and the event name information meets the preset text format requirement, it is determined that the event name information has passed the verification, and the event name can be accurately verified based on the text length requirement and the text format requirement, ensuring that the event name meets the preset requirements, and avoiding the impact of abnormal event names on the network security CTF platform's management of events, thereby improving the event management efficiency of the network security CTF platform.

[0067] In some embodiments, the event configuration information includes start time information and end time information; the event configuration information is verified, including: determining the event duration period based on the start time information and the end time information; when the event duration period is within a preset time range, determining that the start time information and the end time information are verified.

[0068] The start time information may refer to information representing the start time of the event.

[0069] The end time information may refer to information representing the end time of the event.

[0070] The duration of the event may refer to the time period between the start time of the event and the end time of the event.

[0071] The preset time range may refer to a preset event duration period. In actual applications, the preset event duration period may be a time period between a preset start time and a preset end time.

[0072] As an example, the event configuration information may also include start time information and end time information. The terminal may first analyze whether the time point represented by the start time information is before the time point represented by the end time information. If the time point represented by the start time information is before the time point represented by the end time information, the terminal may determine the event duration period of the event based on the start time information and the end time information. The terminal may then compare the event duration period with a preset time range. If the event duration period is within the preset time range, the terminal may determine that the start time information and the end time information have passed the verification. If the event duration period is not completely within the preset time range or the event duration period is not completely within the preset time range, the terminal may determine that the start time information and the end time information have not passed the verification.

[0073] In this embodiment, the duration of the event is determined based on the start time information and the end time information. When the duration of the event is within the preset time range, the start time information and the end time information are verified, and whether the start and end times of the event meet the preset requirements can be analyzed based on the preset time range, thereby avoiding the impact of abnormal start and end times of the event on the management of the network security CTF platform, thereby improving the event management efficiency of the network security CTF platform.

[0074] In some embodiments, the above method also includes: in response to a question adding instruction for the event creation interface, displaying a question editing interface of the event corresponding to the question adding instruction; in response to a question editing instruction for the question editing interface, obtaining the question information input by the question editing instruction; when the question information passes the verification, using the event identification information of the event corresponding to the question adding instruction as the primary key of the question information, and writing the question information into the event database; the event database is used to generate the event title of the event corresponding to the question adding instruction in the network security CTF platform according to the question information.

[0075] Among them, the question adding instruction may refer to an instruction / command for adding / editing a competition title for a specific competition. In actual applications, the question adding instruction has a corresponding competition, and the question adding instruction may be used to add / edit the competition title of the competition corresponding to the question adding instruction.

[0076] The question information may refer to information representing the question name, question type, question label, question content, question options and score of the competition.

[0077] As an example, the terminal may generate a title adding instruction for the event creation interface in response to a user clicking a "event title" button corresponding to a specific event on the event creation interface. The terminal may respond to the title adding instruction for the event creation interface by displaying a title editing interface for the event corresponding to the title adding instruction, such as Figure 5As shown, a schematic diagram of a topic editing interface is provided. The terminal can generate a topic editing instruction for the topic editing interface in response to the user editing / entering the competition topic in the topic editing interface. The terminal can respond to the topic editing instruction for the topic editing interface and obtain the topic information input by the topic editing instruction. After that, the terminal can verify the topic information to determine whether the topic information meets the preset topic requirements. If the topic information meets the preset topic requirements, the terminal can determine that the topic information has passed the verification. The terminal can use the event identification information of the event corresponding to the topic adding instruction as the primary key of the topic information and write the topic information into the event database. The event database verifies the topic information, and generates / updates the topic topic of the event corresponding to the topic adding instruction in the network security CTF platform according to the topic information after the topic information passes the verification.

[0078] In this embodiment, by responding to a question adding instruction for the event creation interface, the question editing interface of the event corresponding to the question adding instruction is displayed; in response to a question editing instruction for the question editing interface, the question information input by the question editing instruction is obtained; when the question information passes the verification, the event identification information of the event corresponding to the question adding instruction is used as the primary key of the question information, and the question information is written into the event database; the event database is used to generate the event title of the event corresponding to the question adding instruction in the network security CTF platform according to the title information, and can accurately verify the input title information to avoid the impact of abnormal event titles on the management of events by the network security CTF platform, thereby improving the event management efficiency of the network security CTF platform.

[0079] In some embodiments, the topic information includes topic type information, and the topic information passes verification, including: when the topic type information is the same as any topic type in a preset topic type set, determining that the topic type information passes verification.

[0080] Among them, the question type information may refer to information that characterizes the type of competition question. In actual applications, the types of competition questions may include but are not limited to Web, Pwn, Reverse, Crypto, Misc, etc. In specific implementations, Web questions in CTF competitions usually refer to exploiting the vulnerabilities of the Internet information system itself and writing an exploit to obtain the host's permissions. Pwn questions in CTF competitions usually refer to exploiting the vulnerabilities of the program itself and writing an exploit script to crack the program to obtain the host's permissions. Reverse questions in CTF competitions usually refer to finding security vulnerabilities through disassembly, decompilation and other technologies, and can be found by analyzing program code and other means. Crypto questions in CTF competitions usually refer to obtaining encrypted content by analyzing encryption algorithms, cracking ciphertext or forging signatures. Misc questions in CTF competitions usually refer to some more complex security issues that are not easy to classify, such as binary Sudoku, image steganography, binary analysis, etc.

[0081] Among them, the preset question type set may include Web, Pwn, Reverse, Crypto, Misc and other question types.

[0082] As an example, the question information may include question type information. The terminal may compare each question type in a preset question type set with the input question type information one by one. If the question type information is the same as any question type in the preset question type set, the terminal may determine that the question type information has passed the verification. If the question type information is different from any question type in the preset question type set, the question type information is out of scope and the terminal may determine that the question type information has failed the verification.

[0083] In this embodiment, by determining that the question type information has passed the verification when the question type information is the same as any question type in a preset question type set, the question type information can be accurately verified based on the preset question type set, thereby avoiding the impact of abnormal question type information on the management of network security CTF platform events, thereby improving the event management efficiency of the network security CTF platform.

[0084] In some embodiments, the above method also includes: generating and displaying first prompt information when the event configuration information fails to pass verification; and / or generating and displaying second prompt information when the question information fails to pass verification.

[0085] The first prompt information may refer to information used to prompt the user to modify the event configuration information.

[0086] The second prompt information may refer to information for prompting the user to modify the question information.

[0087] As an example, if the event configuration information fails to pass the verification, the terminal can analyze the specific reason why the event configuration information fails to pass the verification, and generate a first prompt information based on the specific reason. The terminal can display the first prompt information and the specific reason why the event configuration information fails to pass the verification to the user through a pop-up window or other means, so as to prompt the user to modify the event configuration information. If the title information fails to pass the verification, the terminal can also analyze the specific reason why the title information fails to pass the verification, and generate a second prompt information based on the specific reason. The terminal can display the second prompt information and the specific reason why the title information fails to pass the verification to the user through a pop-up window or other means, so as to prompt the user to modify the title information.

[0088] In this embodiment, by generating and displaying the first prompt information when the event configuration information fails to pass the verification; and / or generating and displaying the second prompt information when the question information fails to pass the verification, the corresponding prompt information can be displayed to the user in a timely manner when the event configuration information fails to pass the verification or the question information fails to pass the verification, prompting the user to modify the event configuration information or the question information, thereby improving the event management efficiency of the network security CTF platform.

[0089] In some embodiments, the network security CTF platform is a competition platform that integrates problem solving, competition organization and management of various types of questions such as Web, Pwn, Reverse, Crypto, Misc, etc. When creating an event, a unique UID is added as the unique identifier of the competition. Each functional module uses the UID of the event as the main identifier to create data for each function, so that the platform can efficiently manage and synchronously run multiple events. The management background can display an "Add Event" button on the event creation interface, and click the button to add an event. The information entry of the event includes the configuration of the event title (such as name), type, start and end time, large screen and other information. After the user enters the event configuration information and confirms to save, the event creation is completed. At the same time, the corresponding event will appear in the event center for competition. The event center display interface corresponding to the event center can have multiple events at the same time, which are divided into waiting to start, in progress, and ended according to different time. For example Figure 6 As shown in the figure, a flowchart for creating an event is provided. The administrator clicks the "Add" button in the management background and completes the configuration of the event information, and clicks "OK to save". After submitting the event data (such as event configuration information), the business service determines that the submitted data is valid data, then generates a unique identifier UID for the event as the primary key of the event, and submits the event data to the event database for entry. After the event database obtains the information, it determines whether the format of the event data is consistent with the format of the preset data table. If they are consistent, it is written. After the event data is successfully added, the added event can be viewed in the management background and the event center.

[0090] The competition title can be added / edited by clicking the "Topic List" button in the competition creation interface. Clicking the "Topic List" button displays the topic editing interface. Topics can be created based on the competition UID as the main identifier and topic information. After the competition is created, each function uses the unique identifier of the competition as the main identifier and handles it in combination with its own functional data requirements. This is explained by taking the creation of the topic corresponding to the competition as an example. Figure 7 As shown in the figure, a flowchart for creating a topic is provided. After the administrator has established the event in the management background, he can add topics to this event. Click the "Topic List" button corresponding to the event and complete the configuration of the topic information, then click Save. After submitting the topic data, the business service determines that the submitted topic data is valid data, and obtains the unique identifier UID of the current event, and submits the topic data to the event database for entry. After the event database obtains the information, it determines whether the format of the topic data is consistent with the format of the preset data table, and writes it if it is consistent. After the topic data corresponding to the event is added successfully, the topics added to this event can be viewed in the management background and the event center.

[0091] In this embodiment, by adjusting the logical relationship between the CTF platform's question list, scores, announcements, Wp, large screen, and answer record functional modules, the platform that originally only supports a single event is transformed into a platform that can efficiently manage and simultaneously run multiple events, greatly increasing resource utilization and management convenience. Multiple events can be carried out on a network security CTF platform, making management convenient and resources efficiently utilized.

[0092] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0093] Based on the same inventive concept, the embodiment of the present application also provides a network security CTF platform event management device for implementing the network security CTF platform event management method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the embodiments of one or more network security CTF platform event management devices provided below can refer to the limitations of the network security CTF platform event management method above, and will not be repeated here.

[0094] In an exemplary embodiment, Figure 8 As shown, a competition management device for a network security CTF platform is provided, including: a competition adding module 802, a competition configuration module 804 and an information storage module 806, wherein:

[0095] The event adding module 802 is used to respond to an event adding instruction in the event creation interface of the network security CTF platform, and add the target event corresponding to the event adding instruction to the event list in the event creation interface; the event list includes at least one event.

[0096] The event configuration module 804 is used to respond to the event configuration instruction for the target event in the event list and obtain the event configuration information input by the event configuration instruction; the event configuration information is used to characterize the name, type, start and end time and event result display position of the target event.

[0097] The information storage module 806 is used to generate the event identification information of the target event when the event configuration information passes the verification, use the event identification information as the primary key of the event configuration information, and write the event configuration information into the event database of the network security CTF platform; the event database is used to set the event configuration of the target event in the network security CTF platform according to the event configuration information.

[0098] In one of the exemplary embodiments, the event configuration information includes event name information, and the information storage module 806 is specifically used to obtain the text length of the event name information; when the text length meets the preset text length requirement and the event name information meets the preset text format requirement, it is determined that the event name information has passed the verification.

[0099] In one of the exemplary embodiments, the event configuration information includes start time information and end time information; the information storage module 806 is further specifically used to determine the duration of the event based on the start time information and the end time information; when the event duration is within a preset time range, it is determined that the start time information and the end time information have passed the verification.

[0100] In one of the exemplary embodiments, the device also includes a topic setting module, which is specifically used to respond to a topic adding instruction for the event creation interface, display a topic editing interface of the event corresponding to the topic adding instruction; respond to a topic editing instruction for the topic editing interface, obtain topic information input by the topic editing instruction; when the topic information passes the verification, use the event identification information of the event corresponding to the topic adding instruction as the primary key of the topic information, and write the topic information into the event database; the event database is used to generate a topic of the event corresponding to the topic adding instruction in the network security CTF platform according to the topic information.

[0101] In one of the exemplary embodiments, the topic information includes topic type information, and the topic setting module is further configured to determine that the topic type information passes verification when the topic type information is the same as any topic type in a preset topic type set.

[0102] In one of the exemplary embodiments, the device also includes a prompt module, which is specifically used to generate and display a first prompt message when the event configuration information fails to pass verification; the first prompt message is used to prompt the user to modify the event configuration information; and / or, when the title information fails to pass verification, generate and display a second prompt message; the second prompt message is used to prompt the user to modify the title information.

[0103] Each module in the competition management device of the above-mentioned network security CTF platform can be implemented in whole or in part by software, hardware and their combination. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the corresponding operations of the above-mentioned modules.

[0104] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. Fig. 9As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data such as event configuration information and event topics. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for managing an event of a network security CTF platform is implemented.

[0105] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0106] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0107] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0108] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0109] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0110] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0111] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0112] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A competition management method for a network security CTF platform, characterized in that: The method comprises: In response to an event adding instruction on an event creation interface of a cybersecurity CTF platform, adding a target event corresponding to the event adding instruction to an event list in the event creation interface; the event list includes at least one event; In response to a competition configuration instruction for a target competition in the competition list, obtaining competition configuration information input by the competition configuration instruction; the competition configuration information is used to characterize the name, type, start and end time, and competition result display position of the target competition; When the event configuration information passes the verification, the event identification information of the target event is generated, the event identification information is used as the primary key of the event configuration information, and the event configuration information is written into the event database of the network security CTF platform; the event database is used to set the event configuration of the target event in the network security CTF platform according to the event configuration information.

2. The method according to claim 1, characterized in that The event configuration information includes event name information, and the event configuration information is verified, including: Get the text length of the event name information; When the text length meets the preset text length requirement and the event name information meets the preset text format requirement, it is determined that the event name information passes the verification.

3. The method according to claim 1, characterized in that The event configuration information includes start time information and end time information; the event configuration information is verified, including: Determine the duration of the event according to the start time information and the end time information; When the event duration period is within a preset time range, it is determined that the start time information and the end time information are verified.

4. The method according to claim 1, characterized in that: The method further comprises: In response to a question adding instruction for the event creation interface, displaying a question editing interface for the event corresponding to the question adding instruction; In response to a question editing instruction for the question editing interface, obtaining question information input by the question editing instruction; When the title information passes the verification, the event identification information of the event corresponding to the title adding instruction is used as the primary key of the title information, and the title information is written into the event database; the event database is used to generate the event title of the event corresponding to the title adding instruction in the network security CTF platform according to the title information.

5. The method according to claim 4, characterized in that The topic information includes topic type information, and the topic information passes verification, including: when the topic type information is the same as any topic type in a preset topic type set, determining that the topic type information passes verification.

6. The method according to claim 5, characterized in that The method further comprises: If the event configuration information fails to pass the verification, generating first prompt information and displaying the first prompt information; the first prompt information is used to prompt the user to modify the event configuration information; and / or, If the title information fails to pass the verification, second prompt information is generated and displayed; the second prompt information is used to prompt the user to modify the title information.

7. A competition management device for a network security CTF platform, characterized in that: The device comprises: A competition adding module, for responding to a competition adding instruction on a competition creation interface of a cyber security CTF platform, and adding a target competition corresponding to the competition adding instruction to a competition list in the competition creation interface; the competition list includes at least one competition; A competition configuration module, for obtaining competition configuration information input by the competition configuration instruction in response to the competition configuration instruction for the target competition in the competition list; the competition configuration information is used to characterize the name, type, start and end time and competition result display position of the target competition; The information storage module is used to generate the event identification information of the target event when the event configuration information passes the verification, use the event identification information as the primary key of the event configuration information, and write the event configuration information into the event database of the network security CTF platform; the event database is used to set the event configuration of the target event in the network security CTF platform according to the event configuration information.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images