Network safety simulation method, device and system for resisting strong electromagnetic interference and storage medium

Abstract

The invention provides a network security simulation method, device and system for resisting strong electromagnetic interference and a storage medium, and relates to the technical field of network security. The method comprises the following steps: acquiring strong electromagnetic interference data and network flow data in a strong electromagnetic interference environment; constructing a simulation network environment in which the network equipment is located under strong electromagnetic interference; a plurality of network devices are configured in the simulation network environment; and executing a preset strong electromagnetic anti-interference strategy aiming at the strong electromagnetic interference environment where the network equipment is located so as to check the execution effect of the strong electromagnetic anti-interference strategy. According to the invention, the strong electromagnetic interference environment is simulated to restore the operation condition of each network device in the network system in the strong electromagnetic interference environment, so that the strong electromagnetic anti-interference effect of the network system is checked by executing the adaptive strong electromagnetic anti-interference strategy; therefore, the problem of safe operation of a network system in a strong electromagnetic interference environment can be effectively solved in subsequent practical application.

Description

Technical Field

[0001] This invention relates to the field of network security technology, and in particular to a network security simulation method that resists strong electromagnetic interference. Background Technology

[0002] In order to better address the impact of strong electromagnetic interference on the safe operation of network systems, it is necessary to simulate network systems under strong electromagnetic interference environments and conduct simulation operations to fine-tune the network systems' ability to cope with strong electromagnetic interference environments.

[0003] In practice, it is difficult to find large-scale sites to deploy network systems with a massive number of network devices to simulate the actual operation of network systems under strong electromagnetic interference. Therefore, simulation experiments through model design are particularly important.

[0004] This is because, regardless of the type of network device, most involve the use and management of network traffic. Network traffic refers to the amount of data transmitted and the data transmission rate in a network, and network devices exist primarily to process, transmit, manage, and protect this data.

[0005] In practical applications, real network systems are adjusted according to actual needs. Therefore, the simulated network environment set up using existing strong electromagnetic interference data and network traffic data cannot cover the diverse strong electromagnetic interference scenarios. How to copy and reorganize the aforementioned strong electromagnetic interference data and network traffic data through combination or mapping, so as to adjust to different forms of strong interference environments through continuous data changes, and thus realize the design and combination of different types of strong electromagnetic interference environments, and thus deploy a simulated network environment to provide an adaptive and feasible simulated strong electromagnetic interference anti-interference strategy in a short time, has become an urgent technical problem to be solved. Summary of the Invention

[0006] The purpose of this invention is to overcome the shortcomings of the prior art and provide a network security simulation method, device, system and storage medium that resists strong electromagnetic interference. This invention can simulate the operation of various network devices in the network system under strong electromagnetic interference environment, thereby verifying the strong electromagnetic interference resistance effect of the network system by executing an adapted strong electromagnetic interference resistance strategy.

[0007] To address the existing technical problems, the present invention provides the following technical solution: A cybersecurity simulation method resistant to strong electromagnetic interference includes: Acquire strong electromagnetic interference data and network traffic data under strong electromagnetic interference environment; the strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic; Based on the aforementioned strong electromagnetic interference data and network traffic data, a simulated network environment for network devices under strong electromagnetic interference is constructed; the simulated network environment is configured with several network devices. In response to the strong electromagnetic interference environment in which the aforementioned network devices operate, a preset strong electromagnetic interference suppression strategy is executed to test the effectiveness of the strategy.

[0008] Furthermore, the strong electromagnetic interference data includes at least one of electromagnetic wave intensity data, spectrum analysis data, time domain data, interference source information, interference mode, background noise data, and environmental condition data; The network traffic data includes at least one of the following: traffic statistics, protocol breakdown data, IP address information, session information, application layer data, traffic direction data, time characteristic data, network performance indicators, error packet data, and user behavior analysis. The network devices include at least one of the following: network traffic devices, network security devices, network management devices, storage network devices, load balancing devices, optimization and acceleration devices, access devices, network interface devices, wireless network devices, industrial network devices, and Internet of Things (IoT) devices.

[0009] Furthermore, when constructing a simulated network environment for network devices operating under strong electromagnetic interference, it also includes: Corresponding to the strong electromagnetic interference conditions that need to be processed, optimize the aforementioned strong electromagnetic interference data and / or the aforementioned network traffic data; After optimizing and processing the aforementioned strong electromagnetic interference data and / or the aforementioned network traffic data, a simulated network environment for network devices under strong electromagnetic interference is set up, corresponding to the aforementioned strong electromagnetic interference conditions.

[0010] Furthermore, when implementing the preset strong electromagnetic interference suppression strategy, it specifically includes: Corresponding to the aforementioned strong electromagnetic interference conditions, the corresponding strong electromagnetic interference immunity requirements are determined; wherein, when determining the strong electromagnetic interference immunity requirements, the network devices subjected to strong electromagnetic interference in the aforementioned simulated network environment are identified accordingly. Based on the intensity and range of strong electromagnetic interference suffered by the network devices subjected to it, a corresponding strong electromagnetic interference anti-interference strategy is matched.

[0011] Furthermore, when matching strong electromagnetic interference anti-interference strategies according to the intensity and range of the strong electromagnetic interference suffered by the aforementioned network devices, the specific measures also include: Pre-configure the range of different levels of strong electromagnetic interference intensity, and determine the network devices involved in the strong electromagnetic interference range under the corresponding level for different levels of strong electromagnetic interference intensity; For the aforementioned network devices, a corresponding level of strong electromagnetic interference suppression strategy is matched and executed.

[0012] Furthermore, after implementing the preset strong electromagnetic interference suppression strategy, it also includes: For the aforementioned simulated network environment, the simulation log information generated after executing the aforementioned strong electromagnetic interference suppression strategy is obtained; the simulation log information can record the corresponding execution operations of the aforementioned strong electromagnetic interference suppression strategy, and provide feedback on the safe operation information of the network device subjected to strong electromagnetic interference after the corresponding execution of the aforementioned strong electromagnetic interference suppression strategy.

[0013] Furthermore, by using the aforementioned simulation log information, we can evaluate whether implementing the aforementioned strong electromagnetic interference suppression strategy can eliminate the impact of the aforementioned strong electromagnetic interference on the dangerous operation of network devices in the network system.

[0014] A cybersecurity simulation device resistant to strong electromagnetic interference includes: An information acquisition unit is used to acquire strong electromagnetic interference data and network traffic data under a strong electromagnetic interference environment; the strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic. The model building unit is used to construct a simulated network environment for network devices under strong electromagnetic interference based on the aforementioned strong electromagnetic interference data and network traffic data; the simulated network environment is configured with several network devices. The model simulation unit is used to execute a preset strong electromagnetic interference suppression strategy for the strong electromagnetic interference environment in which the aforementioned network devices are located, so as to verify the execution effect of the aforementioned strong electromagnetic interference suppression strategy.

[0015] A cybersecurity simulation system resistant to strong electromagnetic interference includes: Network nodes are used to send and receive data; The information processing module is used to process strong electromagnetic interference data and network traffic data in environments with strong electromagnetic interference. System server, which connects network nodes and information processing modules; The system server is configured to: acquire strong electromagnetic interference data and network traffic data under strong electromagnetic interference conditions; the strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic; construct a simulated network environment in which the network devices are located under strong electromagnetic interference based on the aforementioned strong electromagnetic interference data and network traffic data; the simulated network environment is configured with several network devices; and execute a preset strong electromagnetic interference anti-interference strategy for the aforementioned strong electromagnetic interference environment in which the network devices are located, so as to verify the execution effect of the aforementioned strong electromagnetic interference anti-interference strategy.

[0016] A computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of any of the methods described above.

[0017] Based on the above advantages and positive effects, the advantages of this invention are: by simulating a strong electromagnetic interference environment, the operating conditions of various network devices in the network system under a strong electromagnetic interference environment are restored, and the strong electromagnetic interference resistance effect of the network system is tested by executing an adapted strong electromagnetic interference resistance strategy, so as to effectively solve the problem of safe operation of the network system under a strong electromagnetic interference environment in subsequent practical applications.

[0018] Furthermore, based on the aforementioned strong electromagnetic interference data and network traffic data, simulated network environments under different types of strong electromagnetic interference are designed. This allows administrators to preset strong electromagnetic interference anti-interference strategies for different scenarios to simulate the handling situation under strong electromagnetic interference, facilitating the migration of preset strong electromagnetic interference anti-interference strategies to real-world applications under actual strong electromagnetic interference environments. Attached Figure Description

[0019] Figure 1 A flowchart provided for an embodiment of the present invention.

[0020] Figure 2 This is a schematic diagram of the device provided in an embodiment of the present invention.

[0021] Figure 3 This is a schematic diagram of the system provided in an embodiment of the present invention.

[0022] Explanation of reference numerals in the attached figures: Device 200, information acquisition unit 201, model building unit 202, model simulation unit 203; System 300, network node 301, information processing module 302, system server 303. Detailed Implementation

[0023] The following detailed description, in conjunction with the accompanying drawings and specific embodiments, provides a further detailed explanation of the network security simulation method, apparatus, system, and storage medium for resisting strong electromagnetic interference disclosed in this invention. It should be noted that the technical features or combinations of technical features described in the following embodiments should not be considered isolated; they can be combined to achieve better technical effects. In the accompanying drawings of the following embodiments, the same reference numerals in each drawing represent the same features or components, which can be applied to different embodiments. Therefore, once an item is defined in one drawing, it does not need to be further discussed in subsequent drawings.

[0024] It should be noted that the structures, proportions, sizes, etc., illustrated in the accompanying drawings are merely for illustrative purposes and to aid those skilled in the art in understanding and reading the invention. They are not intended to limit the conditions under which the invention can be implemented. Any modifications to the structure, changes in proportions, or adjustments to size, provided they do not affect the effectiveness or purpose of the invention, should fall within the scope of the technical content disclosed in the invention. The scope of the preferred embodiments of the present invention includes other implementations, wherein functions may be performed not in the order stated or discussed, including substantially simultaneously or in reverse order, depending on the functions involved. This should be understood by those skilled in the art to which the embodiments of the present invention pertain.

[0025] Techniques, methods, and apparatus known to those skilled in the art may not be discussed in detail, but where appropriate, such techniques, methods, and apparatus should be considered part of the specification. In all examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not as limitations. Therefore, other examples of exemplary embodiments may have different values. Example

[0026] See Figure 1 The diagram shown is a flowchart provided by the present invention. The implementation steps S100 of the method are as follows: S101, acquire strong electromagnetic interference data and network traffic data under strong electromagnetic interference environment.

[0027] The strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic.

[0028] In practice, the strong electromagnetic interference data is preferably acquired by at least one of the following devices: a spectrum analyzer, a radio frequency (RF) detector, an electromagnetic field strength meter, and an interference analyzer.

[0029] The strong electromagnetic interference data includes, but is not limited to, at least one of the following: electromagnetic wave intensity data (e.g., field strength, power density), spectrum analysis data (e.g., spectrum distribution, bandwidth, center frequency), time domain data (e.g., waveform data, instantaneous value, peak value), interference source information (e.g., interference location, interference source type (e.g., natural phenomenon, man-made equipment)), interference mode (e.g., continuous wave interference, pulse interference, modulation interference), background noise data (e.g., environmental noise, noise spectral density), and environmental condition data (e.g., temperature, humidity).

[0030] Since the acquisition methods, acquisition equipment, and types of strong electromagnetic interference data are all existing technologies in this field, they will not be elaborated upon here.

[0031] Accordingly, the network traffic data can be collected by at least one of the following devices: network traffic monitor, network packet capture device, intrusion detection system (IDS) / intrusion prevention system (IPS), traffic analyzer, network performance monitoring tool, deep packet inspection (DPI) device, traffic mirroring device, and time synchronization device (such as GPS time synchronization device, NTP server, etc.).

[0032] The network traffic data includes, but is not limited to, at least one of the following: traffic statistics (e.g., number of data packets, number of bytes, traffic rate, abnormal traffic), protocol breakdown data (e.g., protocol type distribution data, port usage), IP address information (e.g., source IP address, destination IP address, IP address pair), session information (e.g., number of sessions, session duration, session status (e.g., establishing, established, terminated)), application layer data (e.g., application type (e.g., Web, Email, VoIP, P2P, etc.), URL information, content type (e.g., the type of transmitted data is text, image, video, etc.), traffic direction data (e.g., uplink traffic, downlink traffic), time characteristic data (e.g., timestamp, peak traffic time, traffic change trend), network performance indicators (e.g., latency, jitter, packet loss rate, retransmission rate), error packet data (e.g., number of erroneous data packets), and user behavior analysis (e.g., user sessions, behavior patterns (e.g., access frequency, access duration, etc.)).

[0033] Since the methods, equipment, and types of data collection related to network traffic data are all existing technologies in this field, they will not be elaborated upon here.

[0034] In this embodiment, the network devices include, but are not limited to, network traffic devices (e.g., routers, switches), network security devices (e.g., firewalls, intrusion detection systems), network management devices (e.g., network monitoring systems, traffic analyzers), storage network devices (e.g., storage area network switches, network-attached storage devices), load balancing devices (e.g., hardware load balancers, software load balancers), optimization and acceleration devices (e.g., WAN optimization devices, application delivery controllers), access devices (e.g., wireless access points, Ethernet access switches), network interface devices (e.g., network interface cards, fiber optic interface modules), wireless network devices (e.g., wireless access points, wireless controllers), industrial network devices (e.g., industrial Ethernet switches, industrial routers), and Internet of Things (IoT) devices (e.g., IoT gateways, IoT sensors). Since network devices are existing technology in this field, they will not be described in detail here.

[0035] S102, Based on the aforementioned strong electromagnetic interference data and network traffic data, construct a simulated network environment for network devices under strong electromagnetic interference.

[0036] In this embodiment, the simulated network environment is configured with several network devices. The strong electromagnetic interference data is used to simulate the strong electromagnetic interference environment in which the aforementioned network devices are located. Correspondingly, the network traffic data is used to simulate the traffic situation of the aforementioned network devices in the strong electromagnetic interference environment.

[0037] Specifically, when constructing a simulated network environment for network devices under strong electromagnetic interference, step S110 is also included: S111 corresponds to the strong electromagnetic interference conditions that need to be processed, optimizing the aforementioned strong electromagnetic interference data and / or the aforementioned network traffic data.

[0038] In this embodiment, the strong electromagnetic interference conditions can be preset to take into account common strong electromagnetic interference situations in actual operation.

[0039] In practical applications, strong electromagnetic interference (EMI) can be classified into various types based on its source and nature. Specifically, it can be divided into strong electromagnetic interference caused by natural phenomena and strong electromagnetic interference caused by human activities.

[0040] Among these, the types of strong electromagnetic interference caused by the natural phenomena include, but are not limited to, at least one of lightning interference (e.g., direct lightning strikes, indirect lightning strikes), geomagnetic storms, and electrostatic discharge.

[0041] The types of strong electromagnetic interference caused by human-made phenomena include, but are not limited to, interference from industrial equipment (e.g., high-frequency electromagnetic noise generated by electric motors and generators, high-frequency arc interference generated by welding equipment, and interference caused by frequency conversion and switching action of frequency converters and switching power supplies), interference from communication equipment (e.g., electromagnetic interference generated by radio transmitting equipment such as radio stations and mobile phone towers, and high-frequency interference generated by radar and microwave communication systems), interference from household appliances (e.g., microwave leakage generated by microwave ovens, and electromagnetic noise generated by power tools such as electric drills and electric saws), interference from information technology equipment (e.g., electromagnetic interference generated when computers and servers are working, and radio frequency interference generated when monitors and displays are working), and interference from transportation vehicles (e.g., electromagnetic interference generated by the ignition system corresponding to a car engine, interference generated by the motor and control system of electric vehicles, and interference generated by electronic equipment and power systems of aircraft and trains during operation).

[0042] The types of strong electromagnetic interference caused by natural phenomena and those caused by human activities are existing technologies in this field, and therefore will not be elaborated upon further here.

[0043] Considering the types of strong electromagnetic interference caused by natural phenomena and strong electromagnetic interference caused by human phenomena, they can be classified according to the nature of the interference into continuous interference, pulse interference, and sudden interference.

[0044] The continuous interference includes low-frequency interference (e.g., power line interference) and high-frequency interference (e.g., radio communication interference); the pulse interference includes short-pulse interference (e.g., lightning strikes and electrostatic discharge) and long-pulse interference (e.g., slow changes caused by geomagnetic storms); the sudden interference includes occasional interference (i.e., interference that occurs irregularly, such as occasional startup of a device) and periodic interference (i.e., interference that occurs regularly, such as periodic operation of a device).

[0045] Therefore, preferably, based on the above classification, the corresponding strong electromagnetic interference conditions are configured as follows: natural lightning strike interference conditions (including direct and indirect lightning strikes), geomagnetic storm interference conditions, electrostatic discharge interference conditions, industrial equipment interference conditions (including motor interference conditions, generator interference conditions, welding equipment interference conditions, frequency converter and switching power supply interference conditions), communication equipment interference conditions (including radio transmission interference conditions and microwave equipment interference conditions), household appliance interference conditions (including microwave oven interference conditions and power tool interference conditions), information technology equipment interference conditions (including computer interference conditions and monitor interference conditions), and transportation vehicle interference conditions (including automobile engine interference conditions, electric vehicle interference conditions, aircraft operation interference conditions, and train operation interference conditions).

[0046] Correspondingly, based on the nature of the aforementioned interference, the various strong electromagnetic interference conditions are configured according to their interference characteristics as continuous low-frequency interference, continuous high-frequency interference, short-pulse interference, long-pulse interference, sporadic interference, and periodic interference.

[0047] The above breakdown of various strong electromagnetic interference conditions helps to conduct targeted testing and protection measures for specific types of strong electromagnetic interference in actual operation and simulation environments.

[0048] Based on this, in order to better cope with strong electromagnetic interference under different conditions in actual operation, this embodiment preferably optimizes the aforementioned strong electromagnetic interference data and / or the aforementioned network traffic data according to the strong electromagnetic interference conditions to be processed.

[0049] In this embodiment, the optimization operation aims to ensure that the aforementioned strong electromagnetic interference data and / or the aforementioned network traffic data can truly and accurately reflect the actual situation under strong electromagnetic interference conditions, and to ensure the consistency and integrity of the data; furthermore, the optimized data should be able to adapt to different interference intensities and frequencies, and take into account the mutual influence between multiple devices; at the same time, the optimized data and simulation process should be repeatable, and their effectiveness should be verified through experiments.

[0050] Therefore, it can be determined that the purpose of optimization is to preprocess existing strong electromagnetic interference data and / or network traffic data and present it in a form that is more suitable for the aforementioned strong electromagnetic interference conditions to be processed. This helps to process the optimized strong electromagnetic interference data and / or network traffic data that matches the strong electromagnetic interference conditions to be processed in the simulated network environment, and to provide an appropriate strong electromagnetic interference anti-interference strategy.

[0051] Specifically, during the optimization process, the content of the data presentation will preferably undergo the following changes: First, the noise level will be reduced, that is, through denoising processing, the random noise component in the data will be reduced; second, the feature saliency will be enhanced, that is, through feature extraction and enhancement, the key features in the data (such as interference spectrum and power level) will be more salient; third, the time series will be smoother, that is, through outlier handling and smoothing techniques, the time series data will be smoother, reducing sudden anomalies. Since the operational techniques involved in the optimization process are all existing technologies in this field, they will not be elaborated upon here.

[0052] S112, after optimizing the aforementioned strong electromagnetic interference data and / or the aforementioned network traffic data, a simulated network environment for the network devices under strong electromagnetic interference is set up, corresponding to the aforementioned strong electromagnetic interference conditions.

[0053] As an example, and not a limitation, consider a wireless sensor network in an industrial environment. This network deploys multiple sensor nodes in different locations, and each node, or network device, is subject to varying degrees of strong electromagnetic interference (EMI). Therefore, it is necessary to optimize existing EMI data and network traffic data to build a simulation model adapted to this network environment.

[0054] First, existing interfering data needs to be cleaned and preprocessed (e.g., noise reduction and outlier handling) to ensure data quality and consistency.

[0055] The denoising process uses a low-pass filter to reduce random noise in the data, retaining low-frequency components in the interference signal and removing high-frequency noise, thereby obtaining a smoother interference signal.

[0056] The outlier handling described above can identify and remove outliers from the data using statistical methods (such as Z-scores). These outliers may be caused by sensor malfunctions or occasional interference events, and their removal can improve the reliability of the data.

[0057] After data cleaning, key features are extracted for subsequent modeling and analysis. Feature extraction includes the extraction of time-domain and frequency-domain features.

[0058] The time-domain features are used to calculate the basic statistical characteristics of strong electromagnetic interference signals, such as the average value, standard deviation, and peak value; the frequency-domain features are used to analyze the spectrum of the interference signal through Fourier transform and extract the frequency components and their amplitudes.

[0059] Since the technology involved in the feature extraction is existing in the field, it will not be elaborated on here.

[0060] After feature extraction is completed, a simulated network environment in which the network device is located under strong electromagnetic interference is preferably constructed. In this embodiment, a strong electromagnetic interference model and a network traffic model are configured corresponding to the simulated network environment.

[0061] The preferred method for modeling strong electromagnetic interference (EMI) data is to use an Autoregressive Integrated Moving Average (ARIMA) model. The ARIMA model can capture the time-series characteristics of EMI data and is used in simulations.

[0062] The preferred network traffic model uses an exponential smoothing model to model network traffic data.

[0063] The modeling methods for the above strong electromagnetic interference model and network traffic model are existing technologies in this field, so they will not be elaborated on here.

[0064] Next, a simulated network environment is built on the simulation platform, and multiple network devices subjected to strong electromagnetic interference are configured. Specifically, step S120 is included: S121, Select a simulation platform. By way of example and not limitation, this embodiment preferably uses the NS-3 network simulation platform to simulate network model interference under strong electromagnetic interference environment.

[0065] S122, Configure simulation parameters. Import the previously built strong electromagnetic interference model and network traffic model into the simulation platform, and configure specific interference and traffic parameters for each network device to simulate the operation of each device under strong electromagnetic interference.

[0066] S123, Run the simulation. Specifically, after starting the simulation, observe and record the performance of each network device under strong electromagnetic interference conditions, including but not limited to key indicators such as data transmission rate, latency, and bit error rate.

[0067] To ensure that the optimized strong electromagnetic interference (SEMI) data and network traffic data are applicable to SEMI conditions and to guarantee the reliability of the simulation results, the following measures were taken: During the data cleaning and preprocessing stages, filtering and outlier handling were used to ensure the data's authenticity and consistency; during feature extraction and modeling, the SEMI model was ensured to adapt to different interference intensities and frequencies, and the network traffic model was ensured to reflect traffic changes in the real environment; furthermore, the parameters configured on the simulation platform and the simulation process were ensured to be repeatable and verifiable through experimental data, thus guaranteeing the reliability of the simulation results.

[0068] By following the steps above, a simulated network environment containing multiple network devices subjected to strong electromagnetic interference can be successfully constructed. This allows for the evaluation of the performance of network devices under different strong electromagnetic interference conditions, providing a reference for strong electromagnetic interference processing and data optimization in practical applications.

[0069] S103, In response to the strong electromagnetic interference environment in which the aforementioned network device is located, a preset strong electromagnetic interference suppression strategy is executed to verify the effectiveness of the aforementioned strong electromagnetic interference suppression strategy.

[0070] Specifically, when implementing the preset strong electromagnetic interference suppression strategy, step S130 is included: S131, corresponding to the aforementioned strong electromagnetic interference conditions, determines the corresponding strong electromagnetic interference immunity requirements.

[0071] Specifically, when determining the strong electromagnetic interference resistance requirement, the network devices subjected to strong electromagnetic interference in the aforementioned simulated network environment are identified accordingly.

[0072] In this embodiment, the strong electromagnetic interference resistance requirement is used to reflect the ability of network devices to maintain their normal functions and performance in a strong electromagnetic interference environment.

[0073] The requirements for strong electromagnetic interference immunity include, but are not limited to, the requirement that network devices possess interference immunity capabilities in strong electromagnetic interference environments (e.g., the tolerance level of network devices to various types of electromagnetic interference such as pulse interference, continuous wave interference, and amplitude modulation interference), stable performance indicators (e.g., data transmission rate, latency, bit error rate, and device connection stability remain at normal operating levels), recovery capabilities (e.g., after the strong electromagnetic interference disappears, the network device can quickly re-establish the connection and restore normal data transmission and communication), protection measures (e.g., the network device can adopt shielding, filtering, anti-interference circuit design, and other technical means, as well as improve anti-interference capabilities through software algorithms), and environmental adaptability (e.g., the device can still operate normally in various complex environments such as temperature, humidity, and physical vibration).

[0074] In this embodiment, in response to the aforementioned strong electromagnetic interference resistance requirements, evaluation indicators are configured to assess the anti-interference capability and related performance of network devices in strong electromagnetic interference environments. The evaluation indicators include, but are not limited to, at least one of the following: anti-interference capability evaluation indicators, performance stability evaluation indicators, recovery capability evaluation indicators, protection measure evaluation indicators, and environmental adaptability evaluation indicators.

[0075] The anti-interference capability evaluation indicators include pulse interference tolerance evaluation indicators, continuous wave interference tolerance evaluation indicators, and amplitude modulation interference tolerance evaluation indicators.

[0076] The pulse interference tolerance evaluation index is used to assess the equipment's tolerance to pulse electromagnetic interference (such as lightning strikes, power switching transients, etc.), such as maximum tolerated pulse voltage / current, pulse duration, and pulse repetition frequency.

[0077] The continuous wave interference tolerance evaluation index is used to assess the equipment's tolerance to continuous wave electromagnetic interference (such as radio transmitting equipment, microwave equipment, etc.), such as maximum tolerated power density, interference frequency range, and interference duration.

[0078] The amplitude modulation interference tolerance evaluation index is used to assess the equipment's tolerance to amplitude modulation electromagnetic interference (such as amplitude modulation radio signals, power frequency interference, etc.), such as the maximum tolerance amplitude modulation depth, interference frequency range, and interference duration.

[0079] The performance stability evaluation indicators include data transmission rate evaluation indicators, latency evaluation indicators, bit error rate evaluation indicators, and device connection stability evaluation indicators.

[0080] The data transmission rate evaluation index is used to assess the changes in the data transmission rate of the device under interference conditions, such as the data transmission rate (Mbps or Gbps) and the percentage reduction in the transmission rate under interference conditions.

[0081] The latency evaluation metrics are used to assess the data transmission latency of the device in an interference environment, such as average latency (ms), maximum latency (ms), and latency jitter (ms).

[0082] The bit error rate evaluation metric is used to assess the data transmission bit error rate of the device in an interference environment, such as bit error rate (BER), which is the number of bit errors per unit time.

[0083] The device connection stability evaluation index is used to assess the stability of the device's connection status under interference environments, such as the number of connection interruptions, reconnection time, and connection success rate.

[0084] The recovery capability evaluation index is used to assess the ability of the device to quickly re-establish a connection and restore normal data transmission and communication after the disappearance of strong electromagnetic interference, such as recovery time (the time from the end of the interference to the restoration of normal operation) and packet loss rate during the recovery process.

[0085] The evaluation indicators for the protection measures include shielding effectiveness evaluation indicators, filtering effectiveness evaluation indicators, anti-interference circuit design evaluation indicators, and software algorithm evaluation indicators.

[0086] The shielding effectiveness evaluation index is used to assess the effectiveness of external and internal shielding measures for equipment, such as shielding efficiency, type and thickness of shielding materials.

[0087] The filtering performance evaluation indicators are used to assess the filtering effect of the internal filtering circuit of the device on electromagnetic interference, such as filter attenuation (dB) and filter frequency range.

[0088] The anti-interference circuit design evaluation index is used to evaluate the design and effectiveness of the anti-interference circuit inside the device, such as the type of anti-interference circuit (e.g., common-mode filtering, differential-mode filtering, etc.) and the anti-interference effect.

[0089] The software algorithm evaluation metrics are used to assess the effectiveness of the device in improving its anti-interference capability through software algorithms. Examples include the type of anti-interference algorithm (such as adaptive filtering, interference cancellation algorithm, etc.), algorithm processing latency (ms), and algorithm performance (percentage reduction in bit error rate).

[0090] The environmental adaptability evaluation indicators include temperature adaptability evaluation indicators, humidity adaptability evaluation indicators, and physical vibration adaptability evaluation indicators.

[0091] The temperature adaptability evaluation index is used to assess the normal operation capability of the equipment under different temperature environments, such as the operating temperature range (°C) and performance stability at high / low temperatures.

[0092] The humidity adaptability evaluation index is used to assess the normal operation capability of the equipment under different humidity environments, such as the operating humidity range (%RH) and performance stability under high humidity environments.

[0093] The physical vibration adaptability evaluation index is used to assess the normal operation capability of equipment when subjected to mechanical vibration and impact, such as vibration tolerance frequency range (Hz), vibration acceleration (g), and impact tolerance (N).

[0094] The above evaluation indicators can be pre-configured. Through these detailed evaluation indicators, the anti-interference ability and overall performance of network equipment in strong electromagnetic interference and various complex environments can be comprehensively evaluated.

[0095] S132, based on the intensity and range of the strong electromagnetic interference suffered by the network equipment subjected to the aforementioned strong electromagnetic interference, a corresponding strong electromagnetic interference anti-interference strategy is matched.

[0096] It is worth noting here that, when matching a strong electromagnetic interference anti-interference strategy according to the intensity and range of the strong electromagnetic interference suffered by the network device, the process specifically includes step S140: S141, pre-configure the range of different levels of strong electromagnetic interference intensity, and determine the network devices involved in the strong electromagnetic interference range under the corresponding level for different levels of strong electromagnetic interference intensity.

[0097] S142, For the aforementioned network devices, match the corresponding level of strong electromagnetic interference prevention strategy and execute it.

[0098] As an example, and not a limitation, consider a simulated network environment with nine network devices (devices A through I) distributed in an area affected by strong electromagnetic interference (EMI). Based on the intensity and range of the EMI, the network devices are preferably categorized into three levels of EMI intensity. For example, Level 1 EMI is configured as relatively mild EMI, meaning it has a slight impact on device performance; Level 2 EMI is configured as moderate EMI, meaning it has a significant impact on device performance; and Level 3 EMI is configured as very severe EMI, meaning it has a serious impact on device performance.

[0099] The intensity of strong electromagnetic interference experienced by each network device is as follows: Device A, Level 1; Device B, Level 2; Device C, Level 1; Device D, Level 3; Device E, Level 2; Device F, Level 1; Device G, Level 3; Device H, Level 2; Device I, Level 3.

[0100] Based on this, a corresponding strong electromagnetic interference suppression strategy is determined. For network devices (device A, device C, and device F) under Level 1 interference intensity, a basic strong electromagnetic interference suppression strategy is adopted. The preferred approach is to add simple shielding materials (such as aluminum foil) inside the device casing to reduce the impact of external strong electromagnetic interference. Alternatively, basic low-pass filters can be installed at the power input and Ethernet interface to filter out high-frequency electromagnetic interference.

[0101] For network devices (devices B, E, and H) experiencing interference of level 2 intensity, a moderate-intensity electromagnetic interference (EMI) suppression strategy should be adopted. This includes using stronger shielding materials (such as copper shields) and ensuring proper grounding of the shielding material; alternatively, using high-performance electromagnetic interference filters (such as EMI filters) for effective filtering at the power and signal input terminals; or ensuring the quality of the device grounding system by using a star grounding system and connecting all device grounding wires to a common grounding point; or rearranging the device layout to keep the most heavily affected devices as far away from the interference source as possible, increasing physical separation.

[0102] For network devices (D, G, and I) operating under Level 3 interference intensity, the strongest anti-interference measures should be taken. The preferred approach is comprehensive shielding, including adding thick shielding material both inside and outside the device casing and ensuring proper grounding of the shielding material. Alternatively, multi-layer filters, including low-pass, band-pass, and common-mode filters, can be used at the power and signal input terminals to filter out interference signals to the maximum extent. Alternatively, an independent grounding system can be constructed to avoid interference from grounding loops, and dedicated grounding cables can be used to connect the device to the grounding point. Alternatively, advanced digital signal processing algorithms, such as adaptive filtering and interference cancellation algorithms, can be used to filter out interference signals in real time. Alternatively, redundant coding and error correction techniques can be used to improve the reliability of data transmission. Alternatively, critical equipment can be isolated from interference sources using dedicated shielded rooms or cabinets.

[0103] In this way, by improving the strong electromagnetic interference resistance strategies that network devices subjected to strong electromagnetic interference under different strengths of electromagnetic interference, the normal operation of network devices can be ensured.

[0104] Preferably, after executing the preset strong electromagnetic interference suppression strategy, the method further includes: for the aforementioned simulation network environment, obtaining simulation log information generated after executing the aforementioned strong electromagnetic interference suppression strategy.

[0105] The simulation log information can record the corresponding execution operations of the aforementioned strong electromagnetic interference resistance strategy, and provide feedback on the safe operation information of the network device affected by strong electromagnetic interference after the corresponding execution of the aforementioned strong electromagnetic interference resistance strategy (such as device operating status, data transmission rate, bit error rate, latency, connection stability, etc.).

[0106] In this embodiment, the existence of the simulation log information can reflect whether the network device subjected to strong electromagnetic interference can ensure the safe operation of the network after receiving the aforementioned strong electromagnetic interference resistance strategy.

[0107] Preferably, the simulation log information is used to evaluate whether the implementation of the aforementioned strong electromagnetic interference suppression strategy can eliminate the impact of the aforementioned strong electromagnetic interference on the dangerous operation of network devices in the network system.

[0108] Specifically, regarding the aforementioned simulation log information, the changes in the values ​​of the aforementioned pre-configured evaluation indicators reflect whether network devices subjected to strong electromagnetic interference can ensure network security operation after receiving the aforementioned strong electromagnetic interference resistance strategy.

[0109] When the value of an abnormal evaluation indicator returns to the normal preset threshold range, it indicates that the corresponding evaluation indicator has returned to normal. This means that the network device subjected to strong electromagnetic interference has recovered after receiving the aforementioned strong electromagnetic interference suppression strategy, ensuring the safe operation of the network. If the value of an abnormal evaluation indicator does not return to the normal preset threshold range, it means that the corresponding evaluation indicator is still abnormal. This means that the network device subjected to strong electromagnetic interference has not yet recovered after receiving the aforementioned strong electromagnetic interference suppression strategy. In this case, the strong electromagnetic interference suppression strategy can be adjusted to continuously test and ensure the safe operation of the network.

[0110] Since the evaluation of the aforementioned simulation log information using evaluation metrics is existing technology in this field, it will not be elaborated upon further. Furthermore, adjusting strong electromagnetic interference suppression strategies to ensure network security when abnormal evaluation metric values ​​fail to return to the normal preset threshold range is also existing technology in this field, and will not be elaborated upon further.

[0111] Other technical features are described in the previous embodiments and will not be repeated here.

[0112] In addition, see Figure 2 As shown, the present invention also provides an embodiment of a network security simulation device 200 that resists strong electromagnetic interference, comprising: The information acquisition unit 201 is used to acquire strong electromagnetic interference data and network traffic data under strong electromagnetic interference environment; the strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic.

[0113] The model building unit 202 is used to construct a simulated network environment in which network devices are located under strong electromagnetic interference based on the aforementioned strong electromagnetic interference data and network traffic data; the simulated network environment is configured with several network devices.

[0114] The model simulation unit 203 is used to execute a preset strong electromagnetic interference suppression strategy for the strong electromagnetic interference environment in which the aforementioned network device is located, so as to verify the execution effect of the aforementioned strong electromagnetic interference suppression strategy.

[0115] Other technical features are described in the previous embodiments and will not be repeated here.

[0116] In addition, see Figure 3 As shown, the present invention also provides an embodiment of a network security simulation system 300 that resists strong electromagnetic interference, comprising: Network node 301 is used for sending and receiving data.

[0117] In practice, the network node can be configured as any of the network devices in this embodiment.

[0118] The information processing module 302 is used to process strong electromagnetic interference data and network traffic data in a strong electromagnetic interference environment.

[0119] System server 303, which is connected to network node 301 and information processing module 302.

[0120] The system server 303 is configured to: acquire strong electromagnetic interference data and network traffic data under strong electromagnetic interference environment; the strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic; construct a simulated network environment in which the network devices are located under strong electromagnetic interference based on the aforementioned strong electromagnetic interference data and network traffic data; the simulated network environment is configured with several network devices; and execute a preset strong electromagnetic interference anti-interference strategy for the aforementioned strong electromagnetic interference environment in which the network devices are located, so as to verify the execution effect of the aforementioned strong electromagnetic interference anti-interference strategy.

[0121] Other technical features are described in the previous embodiments and will not be repeated here.

[0122] Furthermore, embodiments of the present invention also provide a computer-readable storage medium storing a program for use in the aforementioned cybersecurity simulation system for resisting strong electromagnetic interference. When the program is executed by a processor, it can implement the steps of any of the aforementioned cybersecurity simulation methods for resisting strong electromagnetic interference.

[0123] Other technical features are described in the previous embodiments and will not be repeated here.

[0124] In the foregoing description, within the scope of this disclosure, components may be selectively and operationally incorporated in any number. Furthermore, terms such as “comprising,” “encompassing,” and “having” should be interpreted by default as inclusive or open-ended, rather than exclusive or closed, unless explicitly defined as such. All technical, scientific, or other terms shall be interpreted as understood by one of those skilled in the art, unless explicitly defined as such. Public terms found in dictionaries should not be interpreted in a too idealistic or impractical manner in the context of the relevant technical documentation, unless explicitly defined as such in this disclosure.

[0125] While exemplary aspects of this disclosure have been described for illustrative purposes, those skilled in the art will recognize that the foregoing description is merely a description of preferred embodiments of the invention and is not intended to limit the scope of the invention in any way. The scope of the preferred embodiments of the invention includes other implementations in which functions may be performed in a different order than those described or discussed. Any modifications or alterations made by those skilled in the art based on the foregoing disclosure are within the scope of the claims.

Claims

1. A network security simulation method resistant to strong electromagnetic interference, characterized in that, include: Acquire strong electromagnetic interference data and network traffic data under strong electromagnetic interference environment; The strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic. Based on the aforementioned strong electromagnetic interference data and network traffic data, a simulated network environment for network devices under strong electromagnetic interference is constructed; the simulated network environment is configured with several network devices. In response to the strong electromagnetic interference environment in which the aforementioned network devices operate, a preset strong electromagnetic interference suppression strategy is executed to test the effectiveness of the strategy.

2. The method according to claim 1, characterized in that, The strong electromagnetic interference data includes at least one of the following: electromagnetic wave intensity data, spectrum analysis data, time domain data, interference source information, interference mode, background noise data, and environmental condition data. The network traffic data includes at least one of the following: traffic statistics, protocol breakdown data, IP address information, session information, application layer data, traffic direction data, time characteristic data, network performance indicators, error packet data, and user behavior analysis. The network devices include at least one of the following: network traffic devices, network security devices, network management devices, storage network devices, load balancing devices, optimization and acceleration devices, access devices, network interface devices, wireless network devices, industrial network devices, and Internet of Things (IoT) devices.

3. The method according to claim 1, characterized in that, When constructing a simulated network environment for network devices operating under strong electromagnetic interference, the following are also included: Corresponding to the strong electromagnetic interference conditions that need to be processed, optimize the aforementioned strong electromagnetic interference data and / or the aforementioned network traffic data; After optimizing and processing the aforementioned strong electromagnetic interference data and / or the aforementioned network traffic data, a simulated network environment for network devices under strong electromagnetic interference is set up, corresponding to the aforementioned strong electromagnetic interference conditions.

4. The method according to claim 3, characterized in that, When implementing the preset strong electromagnetic interference suppression strategy, the specific measures include: Corresponding to the aforementioned strong electromagnetic interference conditions, the corresponding strong electromagnetic interference immunity requirements are determined; wherein, when determining the strong electromagnetic interference immunity requirements, the network devices subjected to strong electromagnetic interference in the aforementioned simulated network environment are identified accordingly. Based on the intensity and range of strong electromagnetic interference suffered by the network devices subjected to it, a corresponding strong electromagnetic interference anti-interference strategy is matched.

5. The method according to claim 4, characterized in that, When matching strong electromagnetic interference (EMI) anti-interference strategies based on the intensity and range of EMI experienced by the network devices subjected to the aforementioned strong EMI, the specific steps also include: Pre-configure the range of different levels of strong electromagnetic interference intensity, and determine the network devices involved in the strong electromagnetic interference range under the corresponding level for different levels of strong electromagnetic interference intensity; For the aforementioned network devices, a corresponding level of strong electromagnetic interference suppression strategy is matched and executed.

6. The method according to claim 1, characterized in that, After implementing the preset strong electromagnetic interference suppression strategy, it also includes: For the aforementioned simulated network environment, the simulation log information generated after executing the aforementioned strong electromagnetic interference suppression strategy is obtained; the simulation log information can record the corresponding execution operations of the aforementioned strong electromagnetic interference suppression strategy, and provide feedback on the safe operation information of the network device subjected to strong electromagnetic interference after the corresponding execution of the aforementioned strong electromagnetic interference suppression strategy.

7. The method according to claim 6, characterized in that, Based on the aforementioned simulation log information, we can evaluate whether implementing the aforementioned strong electromagnetic interference suppression strategy can eliminate the impact of the aforementioned strong electromagnetic interference on the dangerous operation of network devices in the network system.

8. A cybersecurity simulation device resistant to strong electromagnetic interference according to any one of claims 1-7, characterized in that... include: The information acquisition unit is used to acquire strong electromagnetic interference data and network traffic data under strong electromagnetic interference environment; The strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic. The model building unit is used to construct a simulated network environment for network devices under strong electromagnetic interference based on the aforementioned strong electromagnetic interference data and network traffic data; the simulated network environment is configured with several network devices. The model simulation unit is used to execute a preset strong electromagnetic interference suppression strategy for the strong electromagnetic interference environment in which the aforementioned network devices are located, so as to verify the execution effect of the aforementioned strong electromagnetic interference suppression strategy.

9. A cybersecurity simulation system resistant to strong electromagnetic interference according to any one of claims 1-7, characterized in that... include: Network nodes are used to send and receive data; The information processing module is used to process strong electromagnetic interference data and network traffic data in environments with strong electromagnetic interference. System server, which connects network nodes and information processing modules; The system server is configured to: acquire strong electromagnetic interference data and network traffic data under strong electromagnetic interference conditions; the strong electromagnetic interference data and network traffic data can respectively reflect the type of strong electromagnetic interference source and the network devices involved in the network traffic; construct a simulated network environment in which the network devices are located under strong electromagnetic interference based on the aforementioned strong electromagnetic interference data and network traffic data; the simulated network environment is configured with several network devices; and execute a preset strong electromagnetic interference anti-interference strategy for the aforementioned strong electromagnetic interference environment in which the network devices are located, so as to verify the execution effect of the aforementioned strong electromagnetic interference anti-interference strategy.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of the method described in any one of claims 1-7.

Images