Link configuration processing method and device for software system

Abstract

The present application discloses a link configuration processing method and device for a software system, the method comprising: capturing data traffic generated when the software system is running; obtaining a new function configured in the software system; obtaining predetermined data and / or services of the software system required for the new function; analyzing the captured data traffic, wherein the analysis is used to find predetermined traffic that uses the predetermined data and / or service from the data traffic; obtaining a link that can access the predetermined data and / or service from the predetermined traffic, and configuring the link that accesses the predetermined data and / or service to the new function. This application solves the problem of low efficiency in configuration by operation and maintenance personnel when expanding functions in a software system, thereby improving the efficiency of link configuration to a certain extent.

Description

Technical Field

[0001] The present application relates to the field of software, and more specifically, to a method and device for processing link configuration in a software system. Background Art

[0002] A software system generally includes multiple services, such as services that provide web pages, services that provide databases, services that provide emails, etc. Each service runs on a server (including physical servers and / or cloud servers), and each service provides services on a certain IP address and port. These IP addresses and port numbers are generally controlled by operation and maintenance personnel.

[0003] In related technologies, software systems are expected to be more flexible and easily extensible. This extensibility may also be provided to ordinary users (here, users who use the software system), for example, allowing users to implement desired functions through configuration. However, when expanding software systems, some of the existing services of the software system need to be used. In this case, operations and maintenance personnel are required to perform configuration. Before configuration, these personnel must also conduct security assessments and other tasks, which is relatively inefficient. Summary of the Invention

[0004] The embodiments of the present application provide a link configuration processing method and device for a software system, so as to at least solve the problem of low efficiency in requiring operation and maintenance personnel to perform configuration when expanding functions in the software system.

[0005] According to one aspect of the present application, a link configuration processing method for a software system is provided, comprising: during the operation of the software system, capturing data traffic generated when the software system is running; obtaining a new function configured in the software system, wherein the new function is a software function provided to users by benefiting existing services and / or data in the software system; obtaining predetermined data and / or services of the software system required for the new function; analyzing the captured data traffic, wherein the analysis is used to search for predetermined traffic that uses the predetermined data and / or service from the data traffic; obtaining a link that can access the predetermined data and / or service from the predetermined traffic, and configuring the link that accesses the predetermined data and / or service to the new function.

[0006] Furthermore, the data traffic includes at least one of the following: data traffic between various server terminals of the software system, and data traffic between the client and various server terminals.

[0007] Furthermore, the step of configuring the link capable of accessing the predetermined data and / or service to the new function includes: obtaining whether the asset corresponding to the link capable of accessing the predetermined data and / or service is in the asset table, wherein the asset includes a network address and / or port number; if the asset is not in the asset table, searching for another link capable of accessing the predetermined data and / or service, until the asset corresponding to the found link is in the asset table, and then configuring the found link to the new function.

[0008] Furthermore, it also includes: obtaining all assets in the captured traffic, and after reviewing and classifying the assets, configuring the obtained assets in the asset table, wherein the review and classification of the assets includes: classifying the assets into newly discovered assets, non-appearing assets or difference assets, the newly discovered assets are network addresses and / or port numbers that appear in the traffic but are not included in the asset table; the non-appearing assets are assets that exist in the asset table, but no traffic to access the assets appears in the traffic; the difference is that the access type in the traffic is inconsistent with the service type corresponding to the asset.

[0009] According to another aspect of the present application, a link configuration processing device for a software system is also provided, including: a capture module, used to capture data traffic generated when the software system is running; a first acquisition module, used to obtain a new function configured in the software system, wherein the new function is a software function provided to users by benefiting the existing services and / or data in the software system; a second acquisition module, used to obtain predetermined data and / or services of the software system required for the new function; an analysis module, used to analyze the captured data traffic, wherein the analysis is used to search for predetermined traffic that uses the predetermined data and / or service from the data traffic; a configuration module, used to obtain a link that can access the predetermined data and / or service from the predetermined traffic, and configure the link that accesses the predetermined data and / or service to the new function.

[0010] Furthermore, the data traffic includes at least one of the following: data traffic between various server terminals of the software system, and data traffic between the client and various server terminals.

[0011] Furthermore, the configuration module is used to: obtain whether the asset corresponding to the link that can access the predetermined data and / or service is in the asset table, wherein the asset includes a network address and / or port number; if the asset is not in the asset table, search for another link that can access the predetermined data and / or service, until the asset corresponding to the found link is in the asset table, and the found link is configured to the new function.

[0012] Furthermore, the configuration module is also used to: obtain all assets in the captured traffic, and after reviewing and classifying the assets, configure the obtained assets in the asset table, wherein the review and classification of the assets includes: classifying assets into newly discovered assets, non-appearing assets or difference assets, the newly discovered assets are network addresses and / or port numbers that appear in the traffic but are not included in the asset table; the non-appearing assets are assets that exist in the asset table, but no traffic to access the assets appears in the traffic; the difference is that the access type in the traffic is inconsistent with the service type corresponding to the asset.

[0013] According to another aspect of the present application, an electronic device is also provided, comprising a memory and a processor; wherein the memory is used to store one or more computer instructions, wherein the one or more computer instructions are executed by the processor to implement the above-mentioned method steps.

[0014] According to another aspect of the present application, a readable storage medium is provided, on which computer instructions are stored, wherein the computer instructions implement the above method steps when executed by a processor.

[0015] In an embodiment of the present application, the method is adopted to capture the data traffic generated by the software system during its operation; obtain a new function configured in the software system, wherein the new function is a software function provided to users by existing services and / or data in the software system; obtain the predetermined data and / or services of the software system required for the new function; analyze the captured data traffic, wherein the analysis is used to find the predetermined traffic that uses the predetermined data and / or service from the data traffic; obtain a link that can access the predetermined data and / or service from the predetermined traffic, and configure the link that accesses the predetermined data and / or service to the new function. This application solves the problem of low efficiency in configuration required by operation and maintenance personnel when expanding functions in the software system, thereby improving the efficiency of link configuration to a certain extent. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The accompanying drawings, which constitute part of this application, are intended to provide a further understanding of this application. The exemplary embodiments and descriptions of this application are intended to explain this application and do not constitute an improper limitation on this application. In the accompanying drawings:

[0017] Figure 1 is a schematic diagram of the software system architecture according to an embodiment of the present application; and

[0018] Figure 2 It is a flowchart of a link configuration processing method of a software system according to an embodiment of the present application. DETAILED DESCRIPTION

[0019] It should be noted that, in the absence of conflict, the embodiments and features of the embodiments in this application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0020] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0021] In the following embodiments, a software system is divided into three parts: a database, a data interface (also referred to as an interface), and an application system. The application system can be understood as a system that interacts with users. For example, in a BS system, the interactive system is a web page. Users select the required functions through the web page, and then call the database data to display it to the user. The data interface is presented to developers for use, and developers can process the data in the database through the data interface. The database is used to store data. The database and application system need to be provided by a server. The server here can be a real server or a cloud service. The database and application system will be configured with corresponding network addresses (IP addresses) and ports. In the following embodiments, the IP addresses and ports are referred to as assets. The application system and the data interface are connected to the database through a link. It should be noted that the data interface will also access the database through the application system, that is, the data interface can directly connect to the database, or it can access the database through the service provided by the server where the application system is located. For example, the application system is a web system, and its service is provided through port 80 of the predetermined IP address. Users can use the application system by accessing port 80 of the IP address through a browser. Software developers can also pass parameters through port 80 of the predetermined IP address (that is, the data interface). After obtaining the parameters, the application system accesses the database and processes the data in the database.

[0022] Figure 1 is a schematic diagram of the software system architecture according to an embodiment of the present application, such as Figure 1 As shown, in Figure 1 There are application system A, application system B, database C, database D, interface E and interface F. Users (through terminals) can access application system A and application system B (terminals can also access application systems through agents). Interface E accesses the database through application system A and application system B, and interface F can access the database directly. It should be noted that although Figure 1 In the figure, two application systems, two databases, and two interfaces are shown, but there can be one or more application systems, databases, and interfaces. The network connection between the application systems, databases, and interfaces can be called a link. Figure 1 Application systems, databases, and interfaces can all be configured with IP addresses and ports, so they can also be called assets. Figure 1 Application system A plus database C can implement a complete business function. In the following implementation, application system A and database C will also be referred to as business subsystems. A software system can include multiple business subsystems. When creating a new business subsystem, in addition to completing the relevant code, it is also necessary to arrange servers, databases, etc. that can support the new business subsystem. At this time, IP addresses and ports must be allocated to the servers, databases, etc., and the links between servers and databases, such as link capacity and backup links, can also be considered. The selection and configuration of these IP addresses, ports, and links can be performed by an administrator, but manual configuration increases the workload and relies on human experience, which is relatively inefficient.

[0023] The following implementation provides two methods for configuring resources for new business systems. Method 1: The process of creating a subsystem based on link reachability. For example, specifying an entry service can quickly complete the creation of a subsystem based on a list of assets recommended by link reachability. Method 2: The process of creating a subsystem based on data content. For example, if Zhang San's personal information is known, a subsystem can be built based on the links involving Zhang San's personal information during the access process. For each link, it can also be labeled based on the behavior sampling (SQL / URL) involved in the link, according to the capabilities of the large model.

[0024] The following example illustrates this.

[0025] A user needs to add a feature to a software system, for example, a feature to track a patient's path through the hospital. This feature can be called a software subsystem (or business subsystem). The system needs to obtain information such as the patient's registration time in each hospital department, the time of the patient's consultation, and the time the patient performed various operations on the hospital's self-service kiosks. This information must be read from a database stored in Database A and Database B. After configuring these features, the user does not need to know which databases the data resides in, nor does he need to know the IP addresses and port numbers of these databases.

[0026] The usual approach here is to let the administrator of the software system configure database A and database B, but this configuration efficiency is relatively low. In order to solve this problem, a link configuration processing method for a software system is provided in the following embodiment. Figure 2 This is a flowchart of a link configuration processing method of a software system according to an embodiment of the present application. Figure 2 The steps involved in the method are described.

[0027] Step S202: During the operation of the software system, data traffic generated by the software system is captured. The data traffic includes at least one of the following: data traffic between various servers of the software system, and data traffic between the client and various servers.

[0028] There are many ways to capture data traffic. The following examples illustrate how.

[0029] This example provides a traffic capture method based on memory design optimization, which specifically includes the following steps: starting a packet capture process, performing packet capture processing on data traffic, and obtaining multiple data packets in a single-threaded read and single-threaded write mode; caching multiple example data packets into a shared memory ring buffer pool, cyclically scheduling the memory of the example shared memory ring buffer pool, and analyzing the data reading and writing status in real time, and pulling data packets for processing when data reading and writing are required; obtaining multiple pulled data packets, starting a parsing process, and parsing multiple example data packets in a single-threaded read and single-threaded write mode.

[0030] Start the packet capture process, perform packet capture processing on the data flow, and obtain multiple data packets in a single-thread read and single-thread write mode. The specific steps include: receiving the packet capture process signal and determining the number of CPU cores; performing multi-threaded packet capture according to the packet capture process signal and the number of CPU cores to obtain multiple data packets; and distributing multiple example data packets. The example caches multiple example data packets in a shared memory ring buffer pool, performs cyclic scheduling on the memory of the example shared memory ring buffer pool, and analyzes the data reading and writing status in real time. When data reading and writing is required, the packet pulling processing is performed. The specific steps include: caching the multiple example data packets of the data packet distribution in a shared memory ring buffer pool; performing cyclic scheduling on the memory of the example shared memory ring buffer pool; analyzing the data reading and writing status in real time to determine whether data reading and writing is required; and when data reading and writing is required, the packet pulling processing is performed.

[0031] The example performs circular scheduling of the memory of the example shared memory ring buffer pool, specifically including the following steps: performing circular traversal memory calls on the shared memory ring buffer pool; when the shared memory ring buffer pool traversal memory is full, re-overwriting the storage in the example shared memory ring buffer pool. The example obtains multiple pulled data packets, starts a parsing process, and parses multiple example data packets in a single-threaded read and single-threaded write mode, specifically including the following steps: obtaining multiple pulled data packets; receiving a parsing process signal; and performing multi-threaded parsing on the multiple example data packets based on the parsing process signal and the number of CPU cores.

[0032] Step S204: obtaining a new function configured in the software system, wherein the new function is a software function that facilitates the service in the software system to be provided to the user.

[0033] Step S206: Obtain predetermined data and / or services of the software system required for the new function.

[0034] Step S208: analyzing the captured data traffic, wherein the analysis is used to search the data traffic for the predetermined traffic that uses the predetermined data and / or service.

[0035] Step S210: obtaining a link capable of accessing the predetermined data and / or service from the predetermined traffic, and configuring the link capable of accessing the predetermined data and / or service to the new function.

[0036] It's important to note that since traffic is publicly accessible, the various access links (including interfaces) exposed in the traffic are also safe for the software system. This is because administrators don't expose links that could pose a security threat to the software system. Therefore, the links identified through analysis of captured traffic are accessible and usable. Furthermore, administrators don't need to configure each newly added feature; all configuration is performed automatically by the software. This eliminates the inefficient configuration required by operations personnel when expanding software functionality, thereby improving link configuration efficiency to a certain extent.

[0037] As an optional implementation, when searching for links corresponding to predetermined data, if multiple links are found, an access path for the predetermined data is constructed based on the starting points and end points of the multiple links, and at least one point in the access path is determined based on the access path and the new function to be configured for the new function.

[0038] Optionally, the above Figure 2 The step of configuring the link capable of accessing the predetermined data and / or service to the new function may also include the following steps: obtaining whether the asset corresponding to the link capable of accessing the predetermined data and / or service is in the asset table, wherein the asset includes a network address and / or port number; if the asset is not in the asset table, searching for another link capable of accessing the predetermined data and / or service, until the asset corresponding to the found link is in the asset table, and then configuring the found link to the new function.

[0039] Optionally, the process may also include obtaining all assets from the captured traffic, reviewing and classifying the assets, and then configuring the obtained assets in an asset table. Classifying the assets includes classifying them as newly discovered, absent, or discrepant. A newly discovered asset is one in which traffic accesses a network address and / or port number that is not included in the asset table; an absent asset is one in which traffic accesses the asset, but the traffic does not include any traffic accessing the asset; and a discrepancy is one in which the access type in the traffic does not match the service type corresponding to the asset. For example, the configuration may be consistent (IP+PORT), but the service configuration may be inconsistent (e.g., MySQL in the asset table, but the actual traffic accesses the Oracle protocol). Through this mechanism, the asset table is iterated to ensure that the asset table is consistent with the actual situation.

[0040] MySQL is a relational database management system. It's one of the most popular relational database management systems and one of the leading relational database management systems (RDBMS) for web applications. MySQL is a relational database management system, which stores data in separate tables rather than storing all data in a single large repository, increasing speed and flexibility. The SQL language used by MySQL is the most commonly used standardized language for accessing databases. MySQL software utilizes a dual licensing policy, with community and commercial editions available. Due to its small size, fast speed, low total cost of ownership, and particularly its open source nature, MySQL is often chosen as the database for both small, medium, and large website developers.

[0041] Oracle Database, also known as Oracle RDBMS or simply Oracle, is a relational database management system developed by Oracle Corporation. It offers excellent portability, ease of use, and powerful functionality, making it suitable for a wide range of large, medium, and small computer environments. It is a highly efficient, reliable, and high-throughput database solution.

[0042] For the above example of database A and database B, use Figure 2The method shown in the embodiment uses the collected traffic to find out the traffic involved in accessing database A and database B, and then configures the new function according to the access link in the traffic, so that the new function can access database A and database B, thereby enabling the new function to be realized. In the above step S210, a link that can access the predetermined data and / or service is obtained from the predetermined traffic, and the link that can access the predetermined data and / or service is configured to the new function. As an optional embodiment, multiple links that can access the predetermined data and / or service are obtained from the predetermined traffic, the multiple links are sorted, and the sorted multiple links are configured to the new function; wherein, the new function preferentially uses the first of the sorted multiple links to access the predetermined data and / or service, and if an exception occurs when using the first link, the second link after the first of the sorted multiple links is used to access the predetermined data and / or service, and so on.

[0043] There are many ways to sort the multiple links. As an optional implementation, sorting the multiple links includes: obtaining the number of times each link in the multiple links appears in the traffic, wherein the link appears in a complete data packet in the traffic and is counted as once; scoring according to the number to obtain a first score, wherein a higher score indicates a greater number of appearances; taking the average size of all data packets appearing in the link, and scoring according to the average size to obtain a second score, wherein a higher second score indicates a larger average size; weighting the first score and the second score to obtain a score, and sorting according to the score corresponding to each link, wherein a higher score indicates a higher ranking.

[0044] In the above step S208, there are many ways to analyze the captured data traffic to obtain the scheduled traffic using the predetermined data and / or service. For example, analyzing the captured data traffic to obtain the scheduled traffic using the predetermined data and / or service includes: obtaining indication information of the predetermined data and / or service used by the new function, wherein the indication information is used to indicate the name or attribute of the predetermined data and / or service; analyzing the label corresponding to the data traffic to obtain data traffic whose similarity between the label and the indication information exceeds a threshold; using the data traffic exceeding the threshold as the predetermined traffic; wherein the label is used to indicate the function of the link where the data traffic is located.

[0045] There are many ways to label the functions of links in data traffic. For example, a neural network model can be trained using multiple sets of training data, each of which includes data traffic on a link and a label indicating the link's function. After training converges, the data traffic to be labeled is input into the neural network model, and the label output by the neural network model serves as the link label. In this example, each link can be labeled based on the behavior samples involved (SQL / URL) and the capabilities of the large model to determine the link's service (also understood as the link's function). For example, labeled link functions may include: acquiring data, querying data, querying public data, reporting exchanged data, and so on.

[0046] The above implementation solves the problem of low efficiency in configuration by operation and maintenance personnel when expanding functions in the software system, thereby improving link configuration efficiency to a certain extent.

[0047] In this embodiment, an electronic device is provided, including a memory and a processor. The memory stores a computer program, and the processor is configured to run the computer program to execute the method in the above embodiment.

[0048] The above program can be executed in a processor or stored in a memory (or computer-readable medium). Computer-readable media includes both permanent and non-permanent, removable and non-removable media, and can be implemented using any method or technology for information storage. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape, disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible by a computing device.

[0049] These computer programs can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable device to implement the process. Figure 1 a process or multiple processes and / or boxes Figure 1 The steps of the functions specified in one or more blocks can be implemented by different modules corresponding to different steps.

[0050] Such a device or system is provided in this embodiment. The device is called a link configuration processing device for a software system, comprising: a capture module for capturing data traffic generated during the operation of the software system; a first acquisition module for acquiring a new function configured in the software system, wherein the new function is a software function provided to users by existing services and / or data in the software system; a second acquisition module for acquiring predetermined data and / or services of the software system required for the new function; an analysis module for analyzing the captured data traffic, wherein the analysis is used to search for predetermined traffic that uses the predetermined data and / or service from the data traffic; a configuration module for acquiring a link that can access the predetermined data and / or service from the predetermined traffic, and configuring the link that accesses the predetermined data and / or service to the new function.

[0051] The system or device is used to implement the functions of the method in the above-mentioned embodiment. Each module in the system or device corresponds to each step in the method, which has been explained in the method and will not be repeated here.

[0052] Optionally, the data traffic includes at least one of the following: data traffic between various server terminals of the software system, and data traffic between the client and various server terminals.

[0053] Optionally, the configuration module is used to: obtain whether the asset corresponding to the link that can access the predetermined data and / or service is in the asset table, wherein the asset includes a network address and / or port number; if the asset is not in the asset table, search for another link that can access the predetermined data and / or service, until the asset corresponding to the found link is in the asset table, and the found link is configured to the new function.

[0054] Optionally, the configuration module is also used to: obtain all assets in the captured traffic, and after reviewing and classifying the assets, configure the acquired assets in the asset table, wherein the review and classification of the assets includes: classifying assets into newly discovered assets, non-appearing assets or difference assets, the newly discovered assets are network addresses and / or port numbers that appear in the traffic but are not included in the asset table; the non-appearing assets are assets that exist in the asset table, but no traffic to access the assets appears in the traffic; the difference is that the access type in the traffic is inconsistent with the service type corresponding to the asset.

[0055] The above implementation solves the problem of low configuration efficiency required by operation and maintenance personnel when expanding functions in the software system, thereby improving link configuration efficiency to a certain extent.

[0056] The above are merely embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application should all be included within the scope of the claims of the present application.

Claims

1. A link configuration processing method for a software system, characterized in that: include: During the operation of the software system, capture the data traffic generated by the software system; Acquiring a new function configured in the software system, wherein the new function is a software function provided to users by facilitating existing services and / or data in the software system; Acquiring predetermined data and / or services of the software system required for the new function; Analyzing the captured data traffic, wherein the analysis is used to find predetermined traffic that uses the predetermined data and / or service from the data traffic; A link capable of accessing the predetermined data and / or service is obtained from the predetermined traffic, and the link for accessing the predetermined data and / or service is configured to the new function; wherein, when searching for the link corresponding to the predetermined data, if multiple links are found, an access path to the predetermined data is constructed according to the starting points and end points of the multiple links, and at least one point in the access path is determined according to the access path and the new function to be configured to the new function; wherein, multiple links capable of accessing the predetermined data and / or service are obtained from the predetermined traffic, the multiple links are sorted, and the sorted multiple links are configured to the new function; wherein, the new function preferentially uses the first of the sorted multiple links to access the predetermined data and / or service, and in the event of an abnormality in the use of the first link, the second link after the first of the sorted multiple links is used to access the predetermined data and / or service, and so on.

2. The method according to claim 1, characterized in that The data traffic includes at least one of the following: Data traffic between the various server ends of the software system, and data traffic between the client and the various server ends.

3. The method according to claim 1, characterized in that The step of configuring a link capable of accessing the predetermined data and / or service to the new function comprises: Obtain whether the asset corresponding to the link capable of accessing the predetermined data and / or service is in the asset table, wherein the asset includes a network address and / or port number. If the asset is not in the asset table, search for another link capable of accessing the predetermined data and / or service until the asset corresponding to the found link is in the asset table, and then configure the found link to the new function.

4. The method according to claim 3, characterized in that Also includes: Acquire all assets in the captured traffic, and after reviewing and classifying the assets, configure the acquired assets in the asset table, wherein the review and classification of the assets includes: classifying assets into newly discovered assets, non-appearing assets or difference assets, wherein the newly discovered assets are network addresses and / or port numbers that appear in the traffic but are not included in the asset table; the non-appearing assets are assets that exist in the asset table, but no traffic appears in the traffic to access the assets; the difference is that the access type in the traffic is inconsistent with the service type corresponding to the asset.

5. A link configuration processing device for a software system, characterized in that: include: The capture module is used to capture the data traffic generated by the software system during its operation; a first acquisition module, configured to acquire a new function configured in the software system, wherein the new function is a software function provided to users by facilitating existing services and / or data in the software system; A second acquisition module is used to acquire predetermined data and / or services of the software system required for the new function; an analysis module, configured to analyze the captured data traffic, wherein the analysis is used to search the data traffic for predetermined traffic that uses the predetermined data and / or service; A configuration module is used to obtain links that can access the predetermined data and / or services from the predetermined traffic, and configure the links that access the predetermined data and / or services to the new function; wherein, when searching for the links corresponding to the predetermined data, if multiple links are found, an access path to the predetermined data is constructed according to the starting points and end points of the multiple links, and at least one point in the access path is determined according to the access path and the new function to be configured to the new function; wherein, multiple links that can access the predetermined data and / or services are obtained from the predetermined traffic, the multiple links are sorted, and the sorted multiple links are configured to the new function; wherein the new function preferentially uses the first of the sorted multiple links to access the predetermined data and / or service, and in the event of an abnormality in the use of the first link, the second link after the first of the sorted multiple links is used to access the predetermined data and / or service, and so on.

6. The device according to claim 5, characterized in that The data traffic includes at least one of the following: Data traffic between the various server ends of the software system, and data traffic between the client and the various server ends.

7. The device according to claim 5, characterized in that The configuration module is used to: Obtain whether the asset corresponding to the link capable of accessing the predetermined data and / or service is in the asset table, wherein the asset includes a network address and / or port number. If the asset is not in the asset table, search for another link capable of accessing the predetermined data and / or service until the asset corresponding to the found link is in the asset table, and then configure the found link to the new function.

8. The device according to claim 7, characterized in that The configuration module is also used to: Acquire all assets in the captured traffic, and after reviewing and classifying the assets, configure the acquired assets in the asset table, wherein the review and classification of the assets includes: classifying assets into newly discovered assets, non-appearing assets or difference assets, wherein the newly discovered assets are network addresses and / or port numbers that appear in the traffic but are not included in the asset table; the non-appearing assets are assets that exist in the asset table, but no traffic appears in the traffic to access the assets; the difference is that the access type in the traffic is inconsistent with the service type corresponding to the asset.

9. An electronic device comprising a memory and a processor; wherein: The memory is configured to store one or more computer instructions, wherein the one or more computer instructions are executed by the processor to implement the method steps according to any one of claims 1 to 4.

10. A readable storage medium having computer instructions stored thereon, wherein: When the computer instructions are executed by a processor, the method steps according to any one of claims 1 to 4 are implemented.

Images