Online CTF information security competition system and construction method

Abstract

The invention provides an online CTF information security competition system and a construction method, and the system comprises a domain name resolution module which is used for providing a domain name resolution mode for each competition question; the I P + port access module is used for providing an access mode based on an I P address and a port; the network environment judgment module is used for detecting whether the network environment where the competitors are located supports domain name extensive resolution or not; the load balancing module is used for balancing the load of the Ngi nx server for realizing the domain name resolution and the I P + port access mode; the management platform module is used for an administrator to configure a competition question environment and monitor access conditions of competitors; the security protection module is used for monitoring access requests of competitors and identifying and intercepting abnormal traffic or hostile attack behaviors; and the log recording module is used for recording access logs and network environment information of the competitors.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to an online CTF information security competition system and a construction method. Background Art

[0002] With the continuous development of information technology, information confrontation between countries is becoming more and more fierce, and network security issues are becoming more and more serious. The research and judgment of network security issues ultimately depends on people with professional capabilities. Therefore, the strength of a country's network security capabilities ultimately depends on the strength of the professional capabilities of network security talents.

[0003] The significance of the CTF information security competition is to improve the participants' network security skills, promote knowledge exchange, discover security talents, enhance security awareness and promote the development of security technology by simulating real information security attack and defense scenarios.

[0004] In the existing construction methods of online CTF information security competitions, contestants often access questions through domain names. However, the network environment used in some online competitions is the intranet of a group company. For network security considerations, domain name pan-resolution is not allowed in many group company intranets.

[0005] When using existing technologies to conduct online CTF information security competitions in the intranet of a group company, if domain name wildcard resolution is not allowed in the intranet of the group company, contestants will not be able to access the competition questions, and common scenarios have certain limitations.

[0006] The present invention proposes an online CTF information security competition system and construction method, which solves the problem that the existing construction method of the online CTF information security competition does not take into account the inability to perform domain name pan-resolution in the intranet environment of some group companies, and thus cannot smoothly access the competition questions. Summary of the invention

[0007] In a first aspect of the present disclosure, an online CTF information security competition system is provided, comprising:

[0008] Domain name resolution module, used to provide domain name resolution methods for each competition topic;

[0009] IP+port access module, used to provide access based on IP address and port;

[0010] The network environment judgment module is used to detect whether the contestant's network environment supports domain name pan-resolution;

[0011] Load balancing module, used to balance the load of Ngi nx server to achieve domain name resolution and IP+port access mode;

[0012] Management platform module, used by administrators to configure the competition environment and monitor contestants’ access;

[0013] Security protection module, used to monitor contestants' access requests, identify and intercept abnormal traffic or malicious attack behaviors;

[0014] The logging module is used to record the contestants' access logs and network environment information.

[0015] In combination with the first aspect, the system includes a server cluster, which includes multiple virtualized server nodes for dynamic allocation of competition environment and automatic scheduling of network resources.

[0016] In combination with the first aspect, the security protection module includes firewall rules configured based on Ng i nx-safedog, and intercepts illegal access requests according to preset strategies.

[0017] In combination with the first aspect, the system automatically switches between the public network and the intranet and selects an access method according to the contestant's geographical location and network type.

[0018] In combination with the first aspect, the system includes configuring a DNS server for performing domain name resolution according to the region and network environment of the contestant.

[0019] A second aspect of the present disclosure provides a method for constructing an online CTF information security competition system, comprising the following steps:

[0020] Provide domain name resolution and IP+port access methods for each competition topic;

[0021] Determine whether the contestant's network environment supports domain name wildcard resolution;

[0022] If domain name pan-resolution is supported, contestants can access the contest topic through the domain name;

[0023] If domain name pan-resolution is not supported, contestants can access the contest questions through IP+port.

[0024] In conjunction with the second aspect, the network environment determination step includes:

[0025] Check whether the contestant's network is a company intranet environment and whether it supports domain name wildcard resolution;

[0026] When a network environment that does not support domain name wildcard resolution is detected, a corresponding IP address and port are generated for contestants to access.

[0027] According to a third aspect of the present disclosure, an electronic device is provided, including:

[0028] one or more processors;

[0029] A storage unit is used to store one or more programs. When the one or more programs are executed by the one or more processors, the one or more processors can implement the method for constructing the online CTF information security competition system.

[0030] According to a fourth aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the method for constructing the online CTF information security competition system can be implemented.

[0031] The online CTF information security competition system and construction method provided by the present invention achieve compatibility support for different network environments by introducing two access modes, domain name resolution and IP+port, in the access of competition questions, and equipping a network environment judgment module. The system automatically identifies the network environment of the contestant, selects the optimal access mode (domain name or IP+port), and combines the load balancing module to ensure the stable operation of the system. The security protection module monitors and intercepts potential malicious access in real time, while the log recording module provides data support for subsequent analysis. This design effectively improves the flexibility, stability and security of the CTF competition, ensures the smoothness and fairness of the competition process, and greatly reduces the access problems caused by differences in network environments. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a structural diagram of an online CTF information security competition system according to an embodiment of the present disclosure;

[0033] Figure 2 A flowchart of a method for constructing an online CTF information security competition system according to an embodiment of the present disclosure;

[0034] Figure 3 It is a schematic diagram of the structure of an electronic device according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0035] Here, exemplary embodiments are described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the embodiments of the present disclosure.

[0036] The terms used in the disclosed embodiments are only for the purpose of describing specific embodiments and are not intended to limit the disclosed embodiments. The singular forms of "a", "said" and "the" used in the disclosed embodiments and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0037] like Figure 1 FIG. 1 is a schematic diagram of the structure of the online CTF information security competition system according to an embodiment of the present disclosure. It includes:

[0038] Domain name resolution module 110, used to provide a domain name resolution method for each competition topic;

[0039] IP+port access module 120, used to provide access based on IP address and port;

[0040] The network environment determination module 130 is used to detect whether the network environment where the contestant is located supports domain name pan-resolution;

[0041] The load balancing module 140 is used to balance the load of the Ng i nx server to implement domain name resolution and IP+port access mode;

[0042] Management platform module 150, used by administrators to configure the competition environment and monitor the access of contestants;

[0043] The security protection module 160 is used to monitor the access requests of the contestants, identify and intercept abnormal traffic or malicious attack behaviors;

[0044] The log recording module 170 is used to record the contestant's access log and network environment information.

[0045] The main function of the domain name resolution module 110 is to provide independent domain name resolution services for each competition topic. When a contestant accesses a competition topic through the Internet, the system will forward the access request to the correct server or service based on the domain name. The configuration of this module can ensure that the domain name of the competition topic environment can be stably resolved during the competition and provide a consistent access experience for contestants, especially in a network environment that supports domain name pan-resolution.

[0046] The IP+port access module 120 is used to provide a direct access method based on IP address and port. When the network environment where the contestant is located does not support domain name resolution, the system will provide the contestant with the IP address and corresponding port number of the competition question through this module. This method avoids access barriers caused by network environment restrictions and ensures that all contestants can seamlessly access the competition question environment.

[0047] The function of the network environment judgment module 130 is to automatically detect whether the network environment where the contestant is located supports domain name pan-resolution. This module uses a network detection method to determine whether the contestant can access the competition questions through the domain name method. If it is detected that the network environment does not support domain name resolution, it automatically switches to the IP+port access method. The intelligent judgment ability of this module enables the system to dynamically adapt to different network conditions to ensure the smooth progress of the competition.

[0048] The load balancing module 140 is responsible for load balancing the domain name resolution access and IP+port access of the contest questions on the Ng i nx server. This module manages the contestants' access requests to the contest questions by allocating system resources to avoid system congestion or server crashes caused by access peaks. The introduction of the load balancing module can effectively improve the stability and response speed of the system, especially when there are many contestants or frequent access requests.

[0049] The management platform module 150 provides a centralized management interface for administrators to configure and monitor the competition environment. Administrators can remotely manage the competition environment through the platform, including starting, pausing or resetting the competition, monitoring the access status of contestants, recording access logs, and implementing operation and maintenance operations. This module is the core management tool of the entire CTF system, ensuring the coordinated operation of various modules during the competition.

[0050] The function of the security protection module 160 is to monitor the access requests of the contestants, identify and intercept abnormal traffic or malicious attack behaviors. This module uses technical means such as firewalls and traffic analysis to perform security analysis on the traffic in the system to prevent malicious damage and attacks on the competition environment. At the same time, this module can set different security policies according to the requirements of the competition environment to ensure the fairness of the competition and the security of the competition system.

[0051] The log recording module 170 is used to record the access behavior and network environment information of the contestants. This module can record the contestant's IP address, access time, access method (domain name or IP+port), network environment status, access log and other data. By recording detailed log information, the administrator can analyze the contestant's behavior, troubleshoot access failures, and further optimize the system after the competition.

[0052] Beneficial effects: The system's architecture design focuses on compatibility and flexibility. By introducing domain name resolution and IP+port dual access methods and intelligent network environment judgment, it solves the access problem caused by differences in network environment in the current CTF competition. At the same time, load balancing and security protection functions enhance the stability and security of the system, can effectively resist possible attacks, and ensure the continuous availability of the competition environment. The management platform module provides administrators with convenient control methods, and the logging function is helpful for later analysis and system optimization.

[0053] Furthermore, the system includes a server cluster, which includes multiple virtualized server nodes for dynamic allocation of competition environment and automatic scheduling of network resources.

[0054] The server cluster is composed of multiple virtualized server nodes. Each server node can run an independent virtualized competition environment and has the ability to dynamically allocate and schedule resources. In CTF competitions, the number of participants may fluctuate greatly, especially in some popular competitions or during peak competition periods. The design of the server cluster can ensure that the system has higher flexibility and scalability in resource usage.

[0055] Each node in the server cluster is a virtualized server that supports running the competition environment in multiple virtualized containers or virtual machines. Virtualization technology allows each node to allocate computing resources, storage resources, and network bandwidth according to actual needs. Administrators can dynamically create, start, pause, or destroy competition virtual machines through the management platform to ensure that system resources are reasonably allocated when contestants access competition questions, avoiding slow competition response or system crashes due to insufficient resources.

[0056] The server cluster has the ability of dynamic allocation and automatic scheduling, that is, the system can automatically allocate and adjust resources for the server nodes of each competition environment based on the real-time access requests, load conditions and network resource utilization of the contestants. When the access traffic of a certain competition increases sharply, the system can automatically allocate more computing and network resources to the competition environment to ensure its smooth operation; at the same time, for the competition environment with less access, the system will reduce resource allocation and optimize the overall resource utilization efficiency.

[0057] Beneficial effects: The introduction of server clusters and virtualized node designs makes the entire CTF information security competition system highly scalable and flexible. The resource isolation and dynamic resource allocation capabilities brought by virtualization technology can ensure that each competition environment runs independently, avoiding the risk of mutual interference during the competition.

[0058] Furthermore, the security protection module includes firewall rules configured based on Ngi nx-safedog and intercepts illegal access requests according to preset policies.

[0059] Ngi nx is a high-performance HTTP and reverse proxy server, widely used in load balancing and content caching. Safedog is a security protection module for Ngi nx, designed to enhance the security of Web applications by configuring specific rules.

[0060] This module can effectively identify and block common web attacks such as SQL injection, cross-site scripting (XSS) and other malicious requests by monitoring and analyzing traffic in real time.

[0061] The preset strategies of the security protection module are a series of rules for different attack types and access modes. These rules define the response measures that the system should take when specific behaviors are detected, such as blocking, logging or alerting.

[0062] Through these policies, the system can effectively block unauthorized access requests and protect the security of the server and the applications it hosts.

[0063] Optionally, the security protection module can be expanded to have intelligent response functions, which can automatically adjust the protection strategy according to the attack type. For example, when the system identifies a SQL injection attack, it can immediately strengthen the database access restrictions and take corresponding protection measures according to the severity of the attack.

[0064] Migrate traffic analysis functions to the cloud, and use the elasticity and powerful computing power of cloud computing to analyze and process massive traffic. The cloud can integrate more security protection resources, such as distributed denial of service (DDoS) protection.

[0065] Furthermore, the system automatically switches between the public network and the intranet and selects an access method according to the geographical location and network type of the contestant.

[0066] The system has an automatic detection function that can determine the contestant's network connection status and the network environment (public network or intranet) in real time. When the contestant connects to different networks, the system will automatically adjust the access policy to ensure that the contestant can successfully access the competition environment.

[0067] For example, when a contestant switches from the intranet to the public network, the system can automatically switch to the domain name access method; conversely, when the contestant reconnects to the intranet that does not support domain name resolution, it automatically switches to the IP+port access method.

[0068] The system can use geographic location services (such as GPS or IP address geolocation) to obtain the geographical location information of the contestants. Based on this information, the system can more intelligently determine the optimal access method.

[0069] For example, if the entrant is located in a specific region and the region is known to support a specific access method, the system will select the most appropriate access method.

[0070] The system can identify the type of network used by the contestant (such as Wi-Fi, mobile data, etc.). Different network types may affect the access method, and the system can adjust the access method accordingly.

[0071] For example, in some cases, the mobile network may have restrictions on domain name resolution, and the system will automatically switch to IP+port access.

[0072] The system can combine historical traffic data and user behavior patterns to make traffic forecasts to adjust and optimize network resource configuration in advance. For example, the system can predict the possible access peak in a certain period of time and prepare corresponding resources and strategies in advance.

[0073] The system can be designed to support multiple paths for simultaneous access, allowing participants to choose the best path between the public network and the intranet for access. By detecting the latency and availability of each path in real time, the system can dynamically adjust the access method and select the optimal path.

[0074] The system can record the access patterns of contestants and analyze their preferences and behavioral characteristics. After understanding the habits of contestants, the system can intelligently recommend the most appropriate access method to reduce the burden of choice for contestants.

[0075] While automatically switching access methods, the system can add a fault-tolerance mechanism. When the current access method fails or is delayed, the system can quickly switch to the backup access method to ensure that contestants can participate smoothly.

[0076] Furthermore, the system includes configuring a DNS server for performing domain name resolution according to the region and network environment of the contestant.

[0077] The system has a dedicated DNS server that is responsible for converting the domain name entered by the contestant into the corresponding IP address. This process is crucial for contestants to access online CTF questions and ensures that the request is correctly routed to the required server.

[0078] The DNS server determines the contestant's geographic location and network environment based on the contestant's IP address in order to perform appropriate domain name resolution.

[0079] By identifying the geographic location of the contestant's IP address, the DNS server can determine the contestant's region and select the best resolution method. For example, if the contestant is located in an intranet environment, the DNS server can recognize that it does not support domain name wildcard resolution and return the appropriate IP address instead of the domain name.

[0080] In addition, the server can also optimize the parsing results according to the network type (such as corporate intranet, public Wi-Fi, mobile data network, etc.) to ensure efficient transmission of traffic.

[0081] The DNS server is configured to support multiple resolution strategies, and can dynamically adjust the resolution method according to the current network status and historical access data. This means that the server can give priority to certain resolution results under certain conditions, enhancing the flexibility and adaptability of the system.

[0082] The DNS server can be combined with traffic analysis tools to monitor the access traffic of participants in real time and analyze usage. Based on historical data, the server can predict peak hours and schedule traffic in advance to avoid overload.

[0083] Multiple DNS servers are deployed in different geographical locations, combined with load balancing technology, so that the contestant's request can be forwarded to the DNS server closest to it for processing. This redundant design ensures that even if a node fails, other nodes can continue to provide services.

[0084] Benefits: Improve system reliability and availability, ensuring smooth access for participants at all times.

[0085] The DNS server integrates an intelligent security protection mechanism that can identify and automatically respond to DNS attacks (such as DNS hijacking, DDoS attacks, etc.). By monitoring abnormal traffic patterns, the server can adjust protection strategies in real time to prevent potential security threats.

[0086] like Figure 2 FIG. 1 is a flow chart of a method for constructing an online CTF information security competition system according to an embodiment of the present disclosure. The method includes the following steps:

[0087] S201: Provide domain name resolution and IP+port access for each contest topic;

[0088] S202: Determine whether the network environment where the contestant is located supports domain name wildcard resolution;

[0089] S203: If domain name pan-resolution is supported, contestants access the contest topic through the domain name;

[0090] S204: If domain name pan-resolution is not supported, contestants access the contest questions through the IP+port method.

[0091] Two access methods are configured for each contest topic in the system: one is through domain name resolution, and the other is through IP address and port. This design aims to improve the flexibility and compatibility of the system to meet the access needs of different contestants.

[0092] The system will automatically detect the contestant's network environment to determine whether it supports domain name wildcard resolution. This step is critical because some network environments (such as some corporate intranets) may restrict the use of domain name resolution for security reasons.

[0093] When the judgment result is that the domain name pan-resolution is supported, the contestant will use the domain name to directly access the corresponding competition topic. This process completes the conversion of the domain name to the IP address through the DNS server, ensuring that the contestant can smoothly enter the competition environment.

[0094] If the result is that the domain name wildcard resolution is not supported, the system will guide the contestants to access through the specified IP address and port. This method ensures that under network restrictions, contestants can still participate in the competition and avoid access barriers caused by network environment problems.

[0095] Beneficial Effects: By providing two access methods, the system can adapt to different network environments, improving overall flexibility and compatibility. No matter which method a contestant uses, he or she can be guaranteed to participate in the competition.

[0096] Optionally, the system can dynamically adjust the access mode based on the real-time monitored network conditions (such as latency, packet loss rate, etc.). If the contestant encounters performance problems when accessing using the IP address, the system can automatically switch to domain name access mode (if supported).

[0097] When it is detected that the network does not support domain name universal resolution, the system not only provides the IP address and port, but also automatically generates detailed error prompts to help contestants understand the problem and guide them on how to switch access methods.

[0098] The system records the access logs of each contestant and analyzes the access status and success rate. These data can be used for subsequent system optimization, network environment improvement and security assessment.

[0099] In steps S203 and S204, the system can integrate multi-level security detection to identify abnormal traffic and potential attacks, and protect the contestants' access requests from being interfered with.

[0100] When contestants come from different geographical locations, the system can intelligently select the nearest server node for domain name resolution or IP access, improving access speed and response time.

[0101] The online CTF information security competition system and construction method provided by the embodiments of the present disclosure achieve compatibility support for different network environments by introducing two access methods, domain name resolution and IP+port, in the access of competition questions, and equipping a network environment judgment module. The system automatically identifies the network environment of the contestant, selects the optimal access method (domain name or IP+port), and combines the load balancing module to ensure the stable operation of the system. The security protection module monitors and intercepts potential malicious access in real time, while the log recording module provides data support for subsequent analysis. This design effectively improves the flexibility, stability and security of the CTF competition, ensures the smoothness and fairness of the competition process, and greatly reduces access problems caused by differences in network environments.

[0102] The electronic device 300 may be a desktop computer, a notebook, a PDA, a cloud server, or other electronic device. The electronic device 300 may include, but is not limited to, a processor 301 and a memory 302. Those skilled in the art will appreciate that Figure 3 It is only an example of the electronic device 300 and does not constitute a limitation of the electronic device 300. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the electronic device may also include input and output devices, network access devices, buses, etc.

[0103] The processor 301 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc.

[0104] The memory 302 may be an internal storage unit of the electronic device 300, for example, a hard disk or memory of the electronic device 300. The memory 302 may also be an external storage device of the electronic device 300, for example, a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the electronic device 300. Further, the memory 302 may also include both an internal storage unit of the electronic device 300 and an external storage device. The memory 302 is used to store the computer program 303 and other programs and data required by the electronic device. The memory 302 may also be used to temporarily store data that has been output or is to be output.

[0105] In the embodiments provided in the present disclosure, it should be understood that the disclosed devices / electronic devices and methods can be implemented in other ways. For example, the device / electronic device embodiments described above are merely schematic. For example, the division of modules or units is only a logical function division. There may be other division methods in actual implementation. Multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, indirect coupling or communication connection of devices or units, which may be electrical, mechanical or other forms.

[0106] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0107] In addition, each functional unit in each embodiment of the present disclosure may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0108] If the integrated module / unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present disclosure implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. The computer program may include computer program code, and the computer program code may be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electric carrier signal, telecommunication signal and software distribution medium. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, the computer-readable medium does not include electric carrier signals and telecommunication signals.

[0109] The above embodiments are only used to illustrate the technical solutions of the present disclosure, rather than to limit them. Although the present disclosure has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present disclosure, and should all be included in the protection scope of the present disclosure.

Claims

1. An online CTF information security competition system, characterized in that: include: Domain name resolution module, used to provide domain name resolution methods for each competition topic; IP+port access module, used to provide access based on IP address and port; The network environment judgment module is used to detect whether the contestant's network environment supports domain name pan-resolution; Load balancing module, used to balance the load of Nginx server to implement domain name resolution and IP+port access; Management platform module, used by administrators to configure the competition environment and monitor the access of contestants; Security protection module, used to monitor contestants' access requests, identify and intercept abnormal traffic or malicious attack behaviors; The logging module is used to record the contestants' access logs and network environment information.

2. The system according to claim 1, characterized in that: The system includes a server cluster, which includes multiple virtualized server nodes for dynamic allocation of competition environment and automatic scheduling of network resources.

3. The system according to claim 1, characterized in that: The security protection module includes firewall rules configured based on Ngi nx-safedog and intercepts illegal access requests according to preset strategies.

4. The system according to claim 1, characterized in that: The system automatically switches between the public network and the intranet and selects the access method according to the contestant's geographical location and network type.

5. The system according to claim 1, characterized in that: The system includes a configured DNS server for performing domain name resolution according to the region and network environment where the contestant is located.

6. A method for constructing an online CTF information security competition system, characterized in that: The following steps are involved: Provide domain name resolution and IP+port access methods for each competition topic; Determine whether the contestant's network environment supports domain name wildcard resolution; If domain name pan-resolution is supported, contestants can access the contest title through the domain name; If domain name pan-resolution is not supported, contestants can access the contest questions through IP+port.

7. The construction method according to claim 1, characterized in that: The network environment determination step comprises: Check whether the contestant's network is the company's intranet environment and whether it supports domain name wildcard resolution; When a network environment that does not support domain name wildcard resolution is detected, a corresponding IP address and port are generated for contestants to access.

8. An electronic device, characterized in that: include: one or more processors; A storage unit, used to store one or more programs, which, when executed by the one or more processors, enable the one or more processors to implement the method for constructing an online CTF information security competition system according to any one of claims 6 to 7.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, it can implement the method for constructing an online CTF information security competition system according to any one of claims 6 to 7.

Images