IP network security test situation display method and system based on Vue-Grid-Layout component

Abstract

The invention provides an IP network security test situation display method and system based on a Vue-Grid-Layout component, and the method comprises the steps: S1, monitoring a network security test task, and carrying out the collection of test task execution result data; s2, performing data processing on the test task execution result data to obtain compatible graphical data; s3, arranging and visualizing the various compatible graphical data to obtain a network security test result graph, and arranging various network security test result graphs to obtain a network security test situation; and S4, exporting test task execution result data, and constructing a situation display template of the test task execution result data based on the network security test situation. According to the method, the structured and unstructured data of the test result are displayed through a graphical technology, a visual IP network security test result visual view is provided for network security testers, and the efficiency of the network security testers for obtaining effective information is improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of network security. Specifically, it relates to a method and system for presenting the situation of IP network security testing based on the Vue-Grid-Layout component. Background Art

[0002] In recent years, with the development and progress of society, life has become increasingly dependent on mobile communication technologies, and many of these mobile communication technologies rely on the construction of IP technology. IP technology enables communication networks to be compatible with more communication methods, facilitating the development of more communication-related services, and providing greater benefits and development prospects for communication networks.

[0003] At the same time, the more extensive the business expansion, the more complex the security issues of the IP technology itself. Therefore, IP network security testing is particularly important. Through the situation presentation technology of IP network security test results, it can help network security testers quickly locate and analyze IP network security problems, and efficiently solve the network security problems brought by IP technology.

[0004] Currently, the data of IP network security test results is redundant and complex, and network security testers cannot directly and quickly extract effective information from the test results. Through the situation presentation technology of network security test results, which provides various data automatic analysis and processing functions, network security testers can customize the graphical form of test result display, and can also drag and arrange the display order of test results graphically. At the same time, it supports the functions of report export and situation display template generation. Further improving the analysis and decision-making efficiency of testers for IP network security testing.

[0005] Patent document CN117234890A discloses an APP automated testing method, and the solution includes: S1: Detect the information of the devices connected to the computer, save the device information, and the server starts multiple services according to the number of devices in the command line; S2: Package the basic operations of Appium into different keywords respectively; S3: After packaging the basic operations of Excel, combine Excel with Appium operations, use Excel to read data, and use Appium to execute test cases according to the read data; S4: Use Appium to locate specific elements. When saving the elements, first save the positioning method and the elements together, and then perform splitting processing; S5: Test startup, the unittest class starts to reconstruct the passed parameters, and then rewrite the constructor unittest.TestCase. At the same time, use the ddt library for data driving to batch execute test cases.

[0006] This solution does not belong to the field of network security technology, and it does not use graphical technology to display the structured and unstructured data of test results. Therefore, it fails to provide an intuitive visualization view of IP network security test results for network security testers and improve the efficiency of network security testers in obtaining effective information. Summary of the Invention

[0007] Aiming at the deficiencies in the prior art, the purpose of the present invention is to provide an IP network security test situation display method and system based on the Vue-Grid-Layout component.

[0008] According to an IP network security test situation display method based on the Vue-Grid-Layout component provided by the present invention, it includes:

[0009] Step S1: Monitor the network security test task and collect the test task execution result data;

[0010] Step S2: Process the test task execution result data to obtain data compatible with graphical representation;

[0011] Step S3: Arrange and visualize the various types of data compatible with graphical representation to obtain a network security test result graph, and arrange multiple network security test result graphs to obtain a network security test situation;

[0012] Step S4: Export the test task execution result data, and then construct a situation display template for the test task execution result data based on the network security test situation.

[0013] Preferably, in the step S1, the task status of the network security test task includes: "scheme design", "environment construction", "initialization", "task execution" and "task end";

[0014] The test task execution result data includes task basic information and the execution result data of network security test tools; the network security test tools include vulnerability mining tools, vulnerability scanning tools and network security fuzz testing tools;

[0015] In the step S2, it includes:

[0016] Step S2.1: Preprocess the test task execution result data to obtain structured data and unstructured data;

[0017] Step S2.2: Process the structured data into JSON type and save the unstructured data in the form of a string; process it into UTF-8 character type.

[0018] Preferably, in the step S2.1, the preprocessing includes: extraction, classification and format specification;

[0019] In the step S2.2, the structured data includes the statistics of the number of vulnerabilities classified based on the vulnerability level and the statistics of the number of vulnerabilities classified according to the vulnerability type; the unstructured data includes the test result data of the network security fuzz testing instrument and the log data of the execution of the network security test task;

[0020] Process the unstructured data into the character type of UTF-8.

[0021] Preferably, in the step S3, confirm the length and width of the complete presentation of the network security test result graph, and then based on the Vue-Grid-Layout component, determine the position information of each network security test result graph displayed on the page according to the result of the user's drag, so as to form a template of the network security situation; the position information is the abscissa and ordinate of the display graph of the network security test situation;

[0022] In the step S3, the automatic layout algorithm is used to ensure that each network security test result graph does not overlap with each other.

[0023] Preferably, in the step S4, the situation display template includes the task type of the network security test, the network security test result graph, and

[0024] The network security test result graph includes: the result graph of vulnerability scanning and the result graph of vulnerability mining; the display forms of the result graph of vulnerability scanning and the result graph of vulnerability mining include: bar chart, pie chart and text.

[0025] According to an IP network security test situation display system based on the Vue-Grid-Layout component provided by the present invention, it includes:

[0026] Module M1: Monitor the network security test task and collect the test task execution result data;

[0027] Module M2: Process the test task execution result data to obtain data compatible with graphing;

[0028] Module M3: Arrange and visualize the various types of data compatible with graphing to obtain the network security test result graph, and arrange multiple network security test result graphs to obtain the network security test situation;

[0029] Module M4: Export the test task execution result data, and then based on the network security test situation, construct a situation display template of the test task execution result data.

[0030] Preferably, in the module M1, the task status of the network security test task includes: "Scheme Design", "Environment Construction", "Initialization", "Task Execution", and "Task Completion".

[0031] The test task execution result data includes task basic information and the execution result data of network security test tools; the network security test tools include vulnerability mining tools, vulnerability scanning tools, and network security fuzz testing tools.

[0032] In the module M2, it includes:

[0033] Module M2.1: Preprocess the test task execution result data to obtain structured data and unstructured data.

[0034] Module M2.2: Process the structured data into JSON type and save the unstructured data in the form of a string; process it into UTF-8 character type.

[0035] Preferably, in the module M2.1, the preprocessing includes: extraction, classification, and format specification.

[0036] In the module M2.2, the structured data includes the statistics of the number of vulnerabilities classified by vulnerability level and the statistics of the number of vulnerabilities classified by vulnerability type; the unstructured data includes the test result data of network security fuzz testing instruments and the log data of network security test task execution.

[0037] Process the unstructured data into UTF-8 character type.

[0038] Preferably, in the module M3, confirm the length and width of the complete presentation of the network security test result graph, and then based on the Vue-Grid-Layout component, determine the position information of each network security test result graph displayed on the page according to the user's dragging result, thereby forming a template for the network security situation; the position information is the abscissa and ordinate of the display graph of the network security test situation.

[0039] In the module M3, use the automatic layout algorithm to ensure that each network security test result graph does not overlap with each other.

[0040] Preferably, in the module M4, the situation display template includes the task type of network security testing, the network security test result graph, and

[0041] The network security test result graph includes: the result graph of vulnerability scanning and the result graph of vulnerability mining; the display forms of the result graph of vulnerability scanning and the result graph of vulnerability mining include: bar chart, pie chart, and text.

[0042] Compared with the prior art, the present invention has the following beneficial effects:

[0043] 1. The present invention displays structured and unstructured data of test results through a graphical technology, providing an intuitive visualization view of IP network security test results for network security testers and improving the efficiency of network security testers in obtaining effective information.

[0044] 2. The present invention provides network security testers with a custom result graph display form and a draggable result view arrangement function. Network security testers can, according to their own needs, customize the viewing of network security test results, and support the test result report export function as well as the saving and selection of situation display templates, facilitating the analysis and decision-making of network security testers on current or subsequent test results; in other words, through the situation display technology, the present invention allows network security testers to customize the display content and form of test results, and provides a drag-and-drop situation layout, enabling them to quickly, clearly, and intuitively view IP network security test results, saving time for network security defense planning and improving the defense ability of IP network security.

[0045] 3. Through the situation display template storage function, the present invention can provide an efficient ability to establish a situation display based on new tasks, facilitating network security testers to quickly view test results, and the report export function can provide strong data support for their subsequent network security analysis. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] By reading the following detailed description of non-limiting embodiments with reference to the accompanying drawings, other features, objects, and advantages of the present invention will become more apparent:

[0047] Figure 1 It is a flow schematic diagram provided by the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0048] The present invention will be described in detail below with reference to specific embodiments. The following embodiments will help those skilled in the art to further understand the present invention, but do not limit the present invention in any form. It should be noted that those of ordinary skill in the art can make several changes and improvements without departing from the concept of the present invention. These all fall within the protection scope of the present invention.

[0049] To solve the above problems, the present invention provides an IP network security test situation display method and system based on the Vue-Grid-Layout component, enabling network security testers to quickly and intuitively view IP network security test results, and further using the situation display of security test results to analyze and make decisions on IP network security behaviors.

[0050] A method for displaying the situation of IP network security testing based on the Vue-Grid-Layout component provided by the present invention includes:

[0051] Step S100: Construct an IP network security testing task. According to the execution of the task plan, monitor the execution process of the network security testing task and obtain the test task execution result data.

[0052] Step S200: Obtain the data results after the execution of different network security tools, perform data preprocessing, data classification, data fusion, and data disambiguation, and generate a graphically compatible data format for the processed test result data.

[0053] Step S300: Support the display of the situation in a graphical form, and provide network security testers with the ability to customize the graphical display form of the test results and implement the function of manually dragging and arranging the test result layout through the use of the Vue-Grid-Layout component.

[0054] Step S400: Based on the test results, provide the function of exporting test result reports in multiple formats.

[0055] Step S500: Save the current situation display form as a template, which can be reused for multiple tasks to improve the efficiency of the situation display.

[0056] Among them, the graphical method in step S200 specifically includes:

[0057] Step S201: Classify the execution results of different network security testing tools, and use big data processing technology to extract and fuse the data. At the same time, remove duplicates and eliminate the ambiguity of different tool names with the same meaning but different attributes.

[0058] Step S202: Classify the network security test results into two types: structured data and unstructured data and process them. Process the structured data into a data structure for structured graphical display and store it structurally. At the same time, perform data encoding processing on the unstructured data and store it in text form.

[0059] Among them, after step S200, step S300 pushes the stored processed result data to the front end for display and provides a human-computer interaction interface for testers. Step S300 specifically includes:

[0060] Step S301: After the execution of the IP network security testing task is completed, provide a human-computer interaction interface for network security testers to select the testing tool and the graphical display form of the testing tool results.

[0061] Step S302: Provide a graphical drag-and-drop function, enabling network security testers to customize the view layout for presenting test results.

[0062] After step S300, step S500 will build an IP network security test situation display template based on the data from step S300 for other tasks to reuse efficiently. Step S500 specifically includes:

[0063] Step S501: Save the final state situation display form in step S302 as a stored situation display template.

[0064] Step S502: Select the situation display template in a new IP network security test task and present the IP network security test situation information of the new task based on the template.

[0065] According to an IP network security test situation display method based on the Vue-Grid-Layout component provided by the present invention, the process of its software system includes:

[0066] Step S1: Monitor network security test tasks and collect data on the execution results of the test tasks.

[0067] Step S2: Process the source data of the collected test task execution results according to the data structure required for graphing to obtain data compatible with graphing.

[0068] Step S3: Arrange and visualize the various types of data compatible with graphing to obtain network security test result graphs, and combine and arrange multiple result graphs for network security test situation display.

[0069] Step S4: Through the report export function, complete the function of exporting data on the execution results of the test tasks, and build a situation display template for the data on the execution results of the test tasks based on the network security test situation content and graph layout arrangement.

[0070] In step S1, the task status of the network security test task includes: "Scheme Design", "Environment Construction", "Initialization", "Task Execution", and "Task End".

[0071] The data on the execution results of the test tasks includes basic task information and the execution result data of network security test tools, such as the result data executed by test tools such as vulnerability mining tools, vulnerability scanning tools, and network security fuzz testing tools.

[0072] Specifically, in step S2, it includes:

[0073] Step S2.1: Preprocess the data on the execution results of the test tasks to obtain structured data and unstructured data.

[0074] Step S2.2: Process the structured data into JSON type and the unstructured data into UTF-8 character type; process the resultant data into JSON type, which is convenient for subsequent statistics on specific attributes such as vulnerability types and vulnerability levels and graphical display. Process the unstructured data into UTF-8 string type, which is convenient for the page to present in text form and improves the readability of test results. Adopt the unified UTF-8 type to prevent the problem of text garbled display on the page due to different encodings.

[0075] Specifically, in the step S2.1, the preprocessing includes extraction, classification, and format specification;

[0076] The structured data includes the statistics of the number of vulnerabilities classified according to vulnerability levels and the statistics of the number of vulnerabilities classified according to vulnerability types;

[0077] The unstructured data includes the test result data of network security fuzz testing instruments and the log data of the execution of network security test tasks;

[0078] In the step S2.2, formulate a unified JSON specification for network security test results; save the unstructured data in the form of strings;

[0079] Specifically, in the step S3, arrange and visualize the compatible graphical data to obtain the network security test result graph, which is specifically implemented through the following software process steps: First, determine the length and width for the complete presentation of each network security test result graph, and then based on the Vue-Grid-Layout component, according to the results dragged by the user, determine the position information of each network security test result graph on the page display, that is, the horizontal and vertical coordinates relative to the situation display view area. An automatic layout algorithm is used to ensure that each network security test result graph can be displayed without occlusion and completely after the user drags, and at the same time, it can ensure that when the result graphs are horizontally filled, they can automatically wrap to the next line for display.

[0080] Specifically, in the step S4, the situation display template storing the test task execution result data is established as follows;

[0081] Based on the step S3, construct a task-based situation display template. The template content includes the task type and whether to display the result graph of vulnerability scanning or the result graph of vulnerability mining, and whether the result graph is displayed in the form of a bar chart, a pie chart, or text.

[0082] And record the size of the network security test result graph and its position information in the situation display view, such as the distance from the upper boundary of the view and the distance from the left boundary of the view.

[0083] The significance of the situation display template for the test task execution result data is that when network security testers encounter similar network security test tasks later, they can select the situation display template to directly display the network security test situation. In a new network security test task, the steps of how to arrange the situation display are omitted, which can improve the decision-making efficiency of network security testers.

[0084] Please refer to Figure 1 , and provide an IP network security test situation display method and system based on the Vue-Grid-Layout component. The method includes:

[0085] Step S100, the tester constructs an IP network security test task through the human-computer interaction interface. The task status is divided into five states: "scheme design", "environment construction", "initialization", "task execution", and "task end".

[0086] After the task is started, the task status begins to change as the task is executed, and the task execution result data is stored in real time. When the task status is "execution completed", the situation display interface can be entered.

[0087] Step S200, first, the data structure of the execution result of the network security test tool needs to be obtained; then, appropriate data processing means are selected to process the data; finally, the processed test result data is generated into a data format compatible with graphing. Step S200 includes:

[0088] In step S201, data preprocessing is performed on the network security test tool result data. First, data extraction and classification are performed. Then, the attributes with the same meaning for different tools and different attributes are found, and the data structure is uniformly standardized.

[0089] In step S202, structured data is uniformly processed into JSON type, and a unified JSON specification for network security test results is formulated. All structured tools follow the specification for data processing and are stored in the database. Unstructured data is uniformly processed into UTF-8 character type and stored in the database in the form of a string. Then, the network security test result data in the database is retrieved and processed in a data structure that conforms to the graphing display rules and stored in the database.

[0090] After step S200, step S300 retrieves the graphing result data from the database and provides the tester with functions to select tools, display results, and drag and drop graphics for custom situation layout. Step S300 specifically includes:

[0091] Step S301, the tester triggers and fills in the tool name and display form to be shown through the provided buttons and pop-up boxes. After the above operations are completed, the interface is bounded by a "square box" with specific length and width, presenting the tool name, the statistical graph of network security test results, and text. Repeat Step S301 to add more network security test result graphs;

[0092] Step S302, the tester completes the custom layout of the situation display by dragging the "square box" in Step S301.

[0093] Step S400, the tester can export the test result data of the IP network security task through the report export function. The report content includes the basic information of the task, test nature, test purpose, test time and location, test items, and test results. The report format types include PDF, XML, DOCX, and HTML.

[0094] Step S500 will build an IP network security test situation display template based on the data basis of Step S300 and store it in the database for selecting the situation display template when creating a new IP network security test task. Step S500 specifically includes:

[0095] Step S501, save the situation layout in the task that has completed the situation layout construction as a situation display template. The stored target information includes the tool name, result display form, and the position information of the "square box" in the current interface;

[0096] Step S502, select, in the newly constructed IP network security test task with the task status of "execution completed", the situation display template of the historical task as the network security test situation display information and layout of the new task, and support modifying the situation display information and layout according to the new task requirements. At the same time, it supports saving as a new situation display template.

[0097] The present invention also provides an IP network security test situation display system based on the Vue-Grid-Layout component. The IP network security test situation display system based on the Vue-Grid-Layout component can be implemented by executing the process steps of the IP network security test situation display method based on the Vue-Grid-Layout component. That is, those skilled in the art can understand the IP network security test situation display method based on the Vue-Grid-Layout component as the preferred implementation manner of the IP network security test situation display system based on the Vue-Grid-Layout component.

[0098] An IP network security test situation display system based on the Vue-Grid-Layout component provided by the present invention includes:

[0099] Module M1: Monitor the network security test task and collect the execution result data of the test task;

[0100] Module M2: Process the execution result data of the test task to obtain data compatible with graphical representation;

[0101] Module M3: Arrange and visualize the various types of data compatible with graphical representation to obtain a network security test result graph, and compile multiple network security test result graphs to obtain a network security test situation;

[0102] Module M4: Export the execution result data of the test task, and then based on the network security test situation, construct a situation display template for the execution result data of the test task.

[0103] Those skilled in the art know that in addition to implementing the system and its various devices, modules, and units provided by the present invention in the form of pure computer-readable program code, the method steps can be logically programmed to enable the system and its various devices, modules, and units provided by the present invention to be implemented in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers, etc., to achieve the same functions. Therefore, the system and its various devices, modules, and units provided by the present invention can be regarded as a hardware component, and the devices, modules, and units included therein for implementing various functions can also be regarded as the structures within the hardware component; the devices, modules, and units for implementing various functions can also be regarded as software modules for implementing the method and the structures within the hardware component.

[0104] The specific embodiments of the present invention have been described above. It should be understood that the present invention is not limited to the above specific embodiments, and those skilled in the art can make various changes or modifications within the scope of the claims, which do not affect the essence of the present invention. Without conflict, the embodiments of the present application and the features in the embodiments can be combined with each other arbitrarily.

Claims

1. An IP network security test situation display method based on the Vue-Grid-Layout component, characterized in that Including: Step S1: Monitor the network security test task and collect the execution result data of the test task; Step S2: Process the execution result data of the test task to obtain data compatible with graphing; Step S3: Arrange and visualize the various types of data compatible with graphing to obtain a network security test result graph, and arrange multiple network security test result graphs to obtain a network security test situation; Step S4: Export the execution result data of the test task, and then construct a situation display template for the execution result data of the test task based on the network security test situation.

2. The method for displaying the IP network security test situation based on the Vue-Grid-Layout component according to claim 1, wherein In the step S1, the task status of the network security test task includes: "scheme design", "environment construction", "initialization", "task execution" and "task end"; The execution result data of the test task includes the basic information of the task and the execution result data of the network security test tool; the network security test tool includes a vulnerability mining tool, a vulnerability scanning tool and a network security fuzz testing tool; In the step S2, it includes: Step S2.1: Preprocess the execution result data of the test task to obtain structured data and unstructured data; Step S2.2: Process the structured data into JSON type and save the unstructured data in the form of a string; process it into UTF-8 character type.

3. The method for displaying the IP network security test situation based on the Vue-Grid-Layout component according to claim 2, wherein, In the step S2.1, the preprocessing includes: extraction, classification and format specification; In the step S2.2, the structured data includes the statistics of the number of vulnerabilities classified based on the vulnerability level and the statistics of the number of vulnerabilities classified according to the vulnerability type; the unstructured data includes the test result data of the network security fuzz testing instrument and the log data of the execution of the network security test task; Process the unstructured data into UTF-8 character type.

4. The method for displaying the IP network security test situation based on the Vue-Grid-Layout component according to claim 3, characterized in that, In the step S3, confirm the length and width of the complete presentation of the network security test result graph, and then determine the position information of each network security test result graph displayed on the page based on the result of the user's drag according to the Vue-Grid-Layout component, so as to form a template for the network security situation; the position information is the abscissa and ordinate of the display graph of the network security test situation; In the step S3, use an automatic layout algorithm to ensure that each network security test result graph does not overlap with each other.

5. The method for displaying the IP network security test situation based on the Vue-Grid-Layout component according to claim 4, wherein In the step S4, the situation display template includes the task type of the network security test, the network security test result graph and The network security test result graph includes: the result graph of vulnerability scanning and the result graph of vulnerability mining; the display forms of the result graph of vulnerability scanning and the result graph of vulnerability mining include: bar chart, pie chart and text.

6. An IP network security test situation display system based on the Vue-Grid-Layout component, characterized in that, Including: Module M1: Monitor the network security test task and collect the execution result data of the test task; Module M2: Process the execution result data of the test task to obtain data compatible with graphing; Module M3: Arrange and visualize the various types of data compatible with graphing to obtain a network security test result graph, and arrange multiple network security test result graphs to obtain a network security test situation; Module M4: Export the execution result data of the test task, and then construct a situation display template for the execution result data of the test task based on the network security test situation.

7. The IP network security test situation display system based on the Vue-Grid-Layout component according to claim 6, characterized in that, In the module M1, the task status of the network security test task includes: "Scheme Design", "Environment Construction", "Initialization", "Task Execution" and "Task End". The execution result data of the test task includes the basic task information and the execution result data of the network security test tool; the network security test tool includes a vulnerability mining tool, a vulnerability scanning tool and a network security fuzz testing tool. In the module M2, it includes: Module M2.1: Preprocess the execution result data of the test task to obtain structured data and unstructured data. Module M2.2: Process the structured data into JSON type and save the unstructured data in the form of a string; process it into a UTF-8 character type.

8. The IP network security test situation display system based on the Vue-Grid-Layout component according to claim 7, characterized in that In the module M2.1, the preprocessing includes: extraction, classification and format specification. In the module M2.2, the structured data includes the vulnerability quantity statistics classified by vulnerability level and the vulnerability quantity statistics classified by vulnerability type; the unstructured data includes the test result data of the network security fuzz testing instrument and the log data of the execution of the network security test task. Process the unstructured data into a UTF-8 character type.

9. The IP network security test situation display system based on the Vue-Grid-Layout component according to claim 8, characterized in that, In the module M3, confirm the length and width of the complete presentation of the network security test result graph, and then determine the position information of each network security test result graph displayed on the page based on the result of the user's drag according to the Vue-Grid-Layout component, and then form a template for the network security situation; the position information is the abscissa and ordinate of the display graph of the network security test situation. In the module M3, each network security test result graph is made non-overlapping through an automatic layout algorithm.

10. The IP network security test situation display system based on the Vue-Grid-Layout component according to claim 9, characterized in that, In the module M4, the situation display template includes the task type of the network security test, the network security test result graph, and The network security test result graph includes: the result graph of vulnerability scanning and the result graph of vulnerability mining; the display forms of the result graph of vulnerability scanning and the result graph of vulnerability mining include: bar chart, pie chart and text.

Images