Method, device and equipment for quickly constructing test target in network target range

Abstract

The embodiment of the invention discloses a rapid construction method, device and equipment for a test target in a network target range, and the method comprises the steps: obtaining a pre-constructed target image in the network target range in response to a network security test demand in the network target range; calling a preset target agent in the target mirror image, obtaining first current application protocol configuration data of a built-in application protocol in the target mirror image, and visually displaying the first current application protocol configuration data in a parameter configuration interface; in response to configuration parameter update information received in the parameter configuration interface, generating update application protocol configuration data, and performing parameter update on a built-in application protocol in the target mirror image according to the update application protocol configuration data; and determining the updated target image as the test target. According to the technical scheme provided by the embodiment of the invention, the adaptation flexibility of the targets in the network target range can be improved, and the configuration efficiency of the target parameters is improved.

Description

Technical Field

[0001] The embodiments of the present invention relate to the fields of information technology and network security technology, and in particular to a method, apparatus and equipment for rapidly constructing test targets in a network range. Background Technology

[0002] Network ranges are core infrastructure in the field of cybersecurity. They build secure and isolated virtual environments through virtualization, simulation, and virtual-real integration technologies. These environments can realistically reproduce real networks, devices, services, and attack scenarios, supporting monitoring and backtracking as well as closed-loop management. They serve scenarios such as talent training, attack and defense drills, and security assessments, and help cybersecurity technology research and development and practical application.

[0003] As a core component of a cyber range, the quality of target construction directly impacts the range's practical value. Current technologies first determine simulation targets through requirements analysis, then perform minimal customization of hardware, systems, services, software, and configurations. The resulting targets are often customized, exhibiting limitations in scope and adaptability. In actual deployment, targets are primarily virtualized images. Virtualization platforms generate functionally fixed images, configuration is completed using startup parameters, and after startup, the instance connects to the virtual network to act as a scenario node.

[0004] In the process of realizing this invention, the inventors found the following defects in the prior art: (1) A large number of static images need to be prepared, which consumes a lot of storage space and increases the deployment and maintenance costs; (2) When adjusting services and parameters during the operation of the scenario, it is necessary to manually log in and configure via VNC (Virtual Network Computing) or SSH (Secure Shell), which requires high operator skills, is cumbersome and inefficient, restricts the flexibility of the target range adaptation and the overall operating efficiency, and cannot meet the needs of high-efficiency and low-cost construction and use. Summary of the Invention

[0005] This invention provides a method, apparatus, and equipment for rapidly constructing test targets in a network range, which can improve the adaptability of targets within the network range and increase the efficiency of target parameter configuration.

[0006] According to one aspect of the present invention, a method for rapidly constructing test targets in a network range is provided, comprising: In response to the network security testing requirements in the network range, obtain the pre-built target image in the network range; Call the preset target proxy in the target target image, obtain the first current application protocol configuration data of the built-in application protocol in the target target image, and visualize the first current application protocol configuration data in the parameter configuration interface; In response to the configuration parameter update information received in the parameter configuration interface, update application protocol configuration data is generated, and the parameters of the built-in application protocol in the target image are updated according to the update application protocol configuration data. The updated target image is identified as the test target, and a network security test that meets the network security test requirements is performed on the test target in the network range.

[0007] According to another aspect of the present invention, a rapid construction apparatus for test targets in a network range is provided, comprising: The target image acquisition module is used to acquire pre-built target images in the network range in response to network security testing requirements in the network range. The first current application protocol configuration data visualization module is used to call the preset target proxy in the target target image, obtain the first current application protocol configuration data of the built-in application protocol in the target target image, and visualize the first current application protocol configuration data in the parameter configuration interface. The application protocol parameter update module is used to respond to the configuration parameter update information received in the parameter configuration interface, generate updated application protocol configuration data, and update the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data. The network security testing module is used to identify the updated target image as the test target and perform network security tests that meet the network security testing requirements on the test target in the network range.

[0008] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, which enables the at least one processor to perform the rapid construction method for test targets in a network range according to any embodiment of the present invention.

[0009] According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions for causing a processor to execute and implement the rapid construction method for test targets in a network range as described in any embodiment of the present invention.

[0010] According to another aspect of the present invention, a computer program product is also provided, comprising a computer program that, when executed by a processor, implements the method for rapidly constructing test targets in a network range as described in any embodiment of the present invention.

[0011] This invention, in response to network security testing requirements in a network range, acquires a pre-built target image from the network range. Further, it invokes a pre-set target proxy within the target image to obtain the first current application protocol configuration data of the built-in application protocol in the target image, and visualizes this data in a parameter configuration interface. After obtaining the visualization result of the first current application protocol configuration data in the parameter configuration interface, in response to configuration parameter update information received in the parameter configuration interface, it generates updated application protocol configuration data and updates the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data. The updated target image is then identified as the test target, and network security testing that meets network security testing requirements is performed on the test target in the network range. This solution solves the problems of large storage consumption, low scenario adaptability, and cumbersome and inefficient parameter configuration in existing test target construction processes, improving the adaptability flexibility of targets within the network range and increasing the efficiency of target parameter configuration.

[0012] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0013] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0014] Figure 1 This is a flowchart of a method for rapidly constructing test targets in a network test range, provided in Embodiment 1 of the present invention; Figure 2 This is a schematic diagram of a rapid construction device for test targets in a network range provided in Embodiment 2 of the present invention; Figure 3 This is a schematic diagram of the structure of an electronic device provided in Embodiment 3 of the present invention. Detailed Implementation

[0015] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0016] It should be noted that the terms "first," "second," and "target," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0017] Example 1 Figure 1 This is a flowchart of a rapid construction method for test targets in a network range according to Embodiment 1 of the present invention. This embodiment is applicable to situations where parameters of the built-in application protocol in the target image are updated through a parameter configuration interface. This method can be executed by a rapid construction device for test targets in a network range. This device can be implemented in software and / or hardware and is generally integrated into an electronic device. This electronic device can be a terminal device or a server device, as long as it can execute the rapid construction method for test targets in a network range. The present invention does not limit the specific type of electronic device. Accordingly, as... Figure 1 As shown, the method includes the following operations: S110. In response to the network security testing requirements in the network range, obtain the pre-built target image in the network range.

[0018] Network security testing requirements can be defined in a network range environment as a set of core constraints, including pre-defined test objectives, scope, objects, metrics, scenarios, and compliance requirements, to verify the security capabilities of a network, system, or business, discover security vulnerabilities, and test the effectiveness of protection. Target images can be pre-packaged, rapidly deployable image files of a standardized range environment.

[0019] In this embodiment of the invention, target images that support rapid deployment can be pre-built in the network range. When the network security testing requirements in the network range change, the pre-built target images in the network range can be retrieved, and their parameters can be modified to adapt the target images to the changed network security testing requirements in the network range.

[0020] In an optional embodiment of the present invention, before obtaining the pre-built target image in the network range, the method may further include: responding to an input basic target configuration requirement, obtaining at least one piece of software or hardware element information matching the basic target configuration requirement; constructing a target base image based on each piece of software or hardware element information; creating a target proxy within the target base image, wherein the target proxy includes multiple service interfaces, and different service interfaces are used to implement different types of services; and calling the registration interface in the target proxy to perform a registration operation on the application protocol configuration data of the built-in application protocol of the target base image to obtain the target target image.

[0021] The basic target configuration requirements can be a predefined set of essential configuration items and constraints in a network test environment to generate a target image that can run normally and meets basic testing conditions. Hardware and software element information can be a set of information related to all hardware attributes and software components used to fully describe, define, and instantiate the target base image. The target base image can be a standardized underlying image in the network test environment that does not contain customized vulnerabilities, business logic, or scenario-based configurations. The target proxy can be a proxy program deployed in the target image. Application protocol configuration data can be a set of various configuration items for built-in application protocols in the target base image.

[0022] In this embodiment of the invention, a target image can be pre-built in a network range before conducting network security testing. Specifically, based on the input basic target configuration requirements, the software and hardware elements matching the basic target configuration requirements can be determined. Furthermore, a basic target image can be built based on each software and hardware element. In a specific example, core software and hardware elements such as hardware configuration, operating system version, service modules, application modules, and database modules matching the basic target configuration requirements can be selected. Further, based on the aforementioned software and hardware element information, standardized settings and initial deployments can be performed on key configuration items such as network topology, service start / stop rules, application protocol parameters, and identity authentication baselines, thereby building a general-purpose basic image with minimum operational capabilities and no customized vulnerabilities or business logic.

[0023] Furthermore, a target proxy program can be embedded into the target base image to create a target proxy. After creating the target proxy, it can be set to auto-start mode and configured with multiple service interfaces to provide different types of services. For example, the target proxy can be used to register application protocols, obtain application protocol status, switch application protocol parameters, start / stop / restart application protocols, and receive external commands through interfaces. Further, the registration interface in the target proxy can be called to register the application protocol configuration data of the built-in application protocol in the target base image, thereby obtaining the target image. Understandably, after successful registration, the application protocol registration result can be viewed through the target proxy.

[0024] In an optional embodiment of the present invention, the step of calling the registration interface in the target target proxy to perform a registration operation on the application protocol configuration data of the built-in application protocol of the target target base image to obtain the target target image may include: obtaining standardized application protocol description data; calling the registration interface in the target target proxy to perform a registration operation on the application protocol configuration data of the built-in application protocol of the target target base image according to the standardized application protocol description data to obtain the target target image.

[0025] Standardized application protocol description data can be a type of structured data that follows unified standards and format specifications. Its role is to completely and unambiguously define and describe all the core elements of the built-in application protocol in the target base image.

[0026] In this invention, when the registration interface in the target proxy is called to perform the registration operation of the application protocol configuration data of the built-in application protocol on the target base image to obtain the target image, the standardized application protocol description data can be obtained first. Then, the registration interface in the target proxy can be called to perform the registration operation of the application protocol configuration data of the built-in application protocol on the target base image according to the standardized application protocol description data to obtain the target image.

[0027] In a specific example, standardized application protocol description data may include, but is not limited to, application protocol parameter description data and application protocol operation descriptions. This embodiment of the invention does not limit the specific content included in the standardized application protocol description data. Specifically, application protocol parameter description data may include, but is not limited to, lists of various parameters compatible with the application protocol. Application protocol operation descriptions may include, but are not limited to, descriptions of operations such as obtaining current configuration, setting, starting, stopping, and restarting. By registering the built-in application protocol of the target base image, the target proxy can register and manage the basic parameter information and executable operation types of the application protocol, and provide application protocol switching operations externally based on this. For example, standardized application protocol description data can be described using JSON format. Standardized application protocol description data can be represented as: { "server_configuration":{ %server configuration "protocol":"HTTPS", "protocolsupportlist": ["HTTPS", "HTTP"] "versionsupportlist": ["ssl3.0", "tls1.2", "tls1.3"] "port": 443, "ssl_certificate": { %Server encrypted communication configuration item "path": " / path / to / cert.pem", "key_path": "path / to / key.pem", "cert_chain": " / path / to / chain.pem" }, "cipher_suites": [%list of cipher suites] "TLS_AES_256_GCM_SHA384", "TLS_CHACHA20_POLY1305_SHA25", “TLS_AES_128_GCM_SHA256” ], "security_parameters": { %security parameters "min_protocol_version": "TLSv1.2", "session_timeout": 3600, "session_cache_size": 10000, "enable_ocsp_stapling": true, "enable_hsts": true, "hsts_max_age": 31536000 }, "client_authentication": { %Client authentication "require_client_cert": false, "ca_cert_path": " / path / to / ca.pem" } } "proxyops": [%proxy operations] "getcur" "switchparam" "restart" “start” "stop"] }

[0028] S120. Call the preset target proxy in the target image, obtain the first current application protocol configuration data of the built-in application protocol in the target image, and visualize the first current application protocol configuration data in the parameter configuration interface.

[0029] The first current application protocol configuration data can be obtained through the target proxy, representing the current application protocol configuration data built into the target image. The parameter configuration interface can be a visual interface that allows users to configure parameters of the application protocols built into the target image.

[0030] Specifically, an external management module can be pre-created. This module can obtain the first current application protocol configuration data built into the target image through a pre-set target proxy. Based on this configuration data, it can generate a parameter configuration interface for user interaction, including display, editing, and operation functions. In essence, the parameter configuration interface can visually display the first current application protocol configuration data.

[0031] In a specific example, the parameter configuration interface can include not only forms for application protocol information, status, and parameters, but also forms for modifying parameters, as well as interactive buttons for application protocol operations such as refresh, setting parameters, starting, stopping, and restarting.

[0032] In an optional embodiment of the present invention, the step of calling a pre-set target proxy in the target target image to obtain the first current application protocol configuration data of the built-in application protocol in the target target image, and visually displaying the first current application protocol configuration data in the parameter configuration interface, may include: calling the communication access interface in the target target proxy to obtain the original application protocol configuration data of the target target image; converting the format of the original application protocol configuration data of the target target image to obtain the first current application protocol configuration data, and visually displaying the first current application protocol configuration data in the parameter configuration interface.

[0033] The original application protocol configuration data can be application protocol configuration data that is directly obtained from the target image and exists in a machine-recognizable form.

[0034] In this embodiment of the invention, when calling the pre-set target proxy in the target target image to obtain the first current application protocol configuration data of the built-in application protocol in the target target image, and visually displaying the first current application protocol configuration data in the parameter configuration interface, the external management module can first call the communication access interface in the target target proxy through the virtual network to obtain the original application protocol configuration data in a machine-recognizable form. After obtaining the original application protocol configuration data, the external management module can perform format conversion on the original application protocol configuration data to obtain the first current application protocol configuration data that is recognizable by the user. Furthermore, the first current application protocol configuration data can be visually displayed in the application protocol configuration data display module in the parameter configuration interface.

[0035] S130. In response to the configuration parameter update information received in the parameter configuration interface, generate updated application protocol configuration data, and update the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data.

[0036] The configuration parameter update information can be change information regarding the application protocol configuration data built into the target base image, obtained through the parameter configuration interface. The updated application protocol configuration data can be the application protocol configuration data determined based on the configuration parameter update information.

[0037] Specifically, after visually displaying the first current application protocol configuration data in the parameter configuration interface, users can determine the application protocol configuration data that matches the network security testing requirements. Furthermore, users can compare the application protocol configuration data matching the network security testing requirements with the first current application protocol configuration data to determine the configuration parameter update information to be updated in the application protocol configuration data of the target base image's built-in application protocols. Further, users can enter this configuration parameter update information through the application protocol configuration data editing module in the parameter configuration interface to generate updated application protocol configuration data. Based on this updated application protocol configuration data, users can then perform parameter update operations on the application protocols built into the target image.

[0038] In an optional embodiment of the present invention, the step of generating updated application protocol configuration data in response to configuration parameter update information received in the parameter configuration interface, and updating the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data, may include: generating original updated application protocol configuration data in response to configuration parameter update information received in the parameter configuration interface; converting the format of the original updated application protocol configuration data to obtain the updated application protocol configuration data; and calling the communication access interface in the target proxy to update the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data.

[0039] The original application protocol configuration data can be directly determined based on the configuration parameter update information received in the parameter configuration interface. The application protocol configuration data can be in a machine-readable format.

[0040] In this embodiment of the invention, when generating updated application protocol configuration data in response to configuration parameter update information received in the parameter configuration interface, and updating the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data, the original updated application protocol configuration data in a user-recognizable format can first be determined based on the configuration parameter update information received in the parameter configuration interface. Further, the original updated application protocol configuration data can be format-converted to obtain updated application protocol configuration data in a machine-recognizable format. Based on this, by clicking the settings option in the parameter configuration interface, the communication access interface in the target proxy can be called to transmit the machine-recognizable updated application protocol configuration data to the target image, and the updated application protocol configuration data can be applied to the application protocol configuration file of the target image to complete the application protocol parameter update operation. It is understood that if the updated application protocol requires a restart to take effect, the restart interface in the target proxy can be called to restart the target image.

[0041] S140. The updated target image is identified as the test target, and a network security test that meets the network security test requirements is performed on the test target in the network range.

[0042] Among them, the test targets can be targets that meet the requirements of network security testing.

[0043] Specifically, after updating the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data, the target image with updated parameters can be identified as the test target, and network security tests that meet the network security testing requirements can be performed on the test target in the network range.

[0044] Therefore, the rapid construction method for test targets in the network test range provided in this embodiment of the invention can obtain configuration parameter update information through the parameter configuration interface, and update the parameters of the built-in application protocol in the target target image based on the updated application protocol configuration data generated by the configuration parameter update information. This method eliminates the need for manual login configuration of each target image via VNC or SSH, enabling batch parameter updates for target images with the same parameter change requirements. Furthermore, users do not need to perform update operations through professional code; they only need to submit configuration parameter update information in the parameter configuration interface to complete the configuration. Based on the above method, test targets that support application protocol parameter reuse and switching can be generated, thereby significantly reducing the number of target images in the network test range, reducing hard disk storage usage, and ensuring compatibility with more instance types. In addition, this method also supports dynamic switching of application protocol parameters during target instance operation, flexibly adjusting the operating mode, and overall possessing higher construction efficiency and usage flexibility.

[0045] In an optional embodiment of the present invention, determining the updated target image as the test target may include: calling the communication access interface in the target target agent to obtain the second current application protocol configuration data of the target image again; comparing and analyzing the updated application protocol configuration data and the second current application protocol configuration data to determine the parameter update result of the built-in application protocol in the target image; and determining the updated target image as the test target if the parameter update result of the built-in application protocol in the target image is determined to be successful.

[0046] The second current application protocol configuration data can be the current application protocol configuration data of the target image's built-in application protocol after the parameter update operation is completed. The parameter update result can be the result information indicating whether the parameter update was successful after the parameter update operation is completed.

[0047] In this embodiment of the invention, during the process of determining the updated target image as the test target, after completing the parameter update operation, the external management module can call the communication access interface in the target target agent to obtain the second current application protocol configuration data of the target image again, and compare and analyze the updated application protocol configuration data and the second current application protocol configuration data to determine whether the parameters of the built-in application protocol in the target image have been successfully updated, that is, to determine the parameter update result of the built-in application protocol in the target image. If it is determined that the parameter update result of the built-in application protocol in the target image is successful, the updated target image can be determined as the test target; if it is determined that the parameter update result of the built-in application protocol in the target image is unsuccessful, the parameter update operation of the built-in application protocol in the target image can be re-executed.

[0048] To more clearly illustrate the technical solutions provided by the embodiments of the present invention, Embodiment 1 of the present invention also provides a rapid construction system for test targets in a network test range. In a specific example, the rapid construction system for test targets in a network test range may include a target proxy module, an application protocol registration module, an application protocol parameter switching module, an application protocol operation module, an external call interface service module, and an external management module. Specifically: Target proxy modules typically contain proxy programs deployed within the target. Their main functions include registering application protocols, obtaining application protocol status, switching application protocol parameters, starting / stopping / restarting application protocols, and receiving external commands through interfaces.

[0049] The application protocol registration module typically includes descriptions of application protocol parameters and operations, presented in JSON format. Application protocol parameters include a list of compatible parameters, while operations include retrieving current configuration, setting, starting, stopping, and restarting. By registering the built-in application protocols of the target base image, the target proxy can register and manage the basic parameter information and executable operation types of the application protocols, and based on this, provide application protocol switching operations to external entities.

[0050] The application protocol parameter switching module is typically used to adjust the application protocol runtime parameters to the required switching state parameters and refresh the service to switch to the new application protocol parameters. This refresh includes parameter setting operations.

[0051] The application protocol operation module is used to obtain the current status of the application protocol, obtain the currently effective parameters, obtain the supported parameters, set new parameters, and start / stop / restart the application protocol. The supported operations depend on the information when the application protocol was registered.

[0052] The external call interface service module mainly includes interfaces for obtaining the list of registered application protocols, obtaining the parameters supported by the application protocol, obtaining the currently effective parameters of the application protocol, setting application protocol parameters, and starting / stopping / restarting the application protocol.

[0053] The external management module calls the target proxy's external call interface through a virtual network. It obtains the application protocol status and parameters and renders an interactive interface to perform operations such as obtaining and setting status parameters, starting, stopping, or restarting services within the instance.

[0054] This invention, in response to network security testing requirements in a network range, acquires a pre-built target image from the network range. Further, it invokes a pre-set target proxy within the target image to obtain the first current application protocol configuration data of the built-in application protocol in the target image, and visualizes this data in a parameter configuration interface. After obtaining the visualization result of the first current application protocol configuration data in the parameter configuration interface, in response to configuration parameter update information received in the parameter configuration interface, it generates updated application protocol configuration data and updates the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data. The updated target image is then identified as the test target, and network security testing that meets network security testing requirements is performed on the test target in the network range. This solution solves the problems of large storage consumption, low scenario adaptability, and cumbersome and inefficient parameter configuration in existing test target construction processes, improving the adaptability flexibility of targets within the network range and increasing the efficiency of target parameter configuration.

[0055] The collection, storage, use, processing, transmission, provision, and disclosure of user personal information in this technical solution comply with relevant laws and regulations and do not violate public order and good morals.

[0056] It should be noted that all information and data involved in this disclosure (including but not limited to data used for display and analysis) are information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data comply with the relevant laws, regulations and standards of the relevant regions.

[0057] It should be noted that any arrangement or combination of the technical features in the above embodiments also falls within the protection scope of this invention.

[0058] Example 2 Figure 2 This is a schematic diagram of a rapid construction device for test targets in a network test range provided in Embodiment 2 of the present invention, as shown below. Figure 2 As shown, the device includes: a target image acquisition module 210, a first current application protocol configuration data visualization module 220, an application protocol parameter update module 230, and a network security testing module 240, wherein: The target image acquisition module 210 is used to acquire a pre-built target image in the network range in response to the network security testing requirements in the network range.

[0059] The first current application protocol configuration data visualization module 220 is used to call the preset target proxy in the target target image, obtain the first current application protocol configuration data of the built-in application protocol in the target target image, and visualize the first current application protocol configuration data in the parameter configuration interface.

[0060] The application protocol parameter update module 230 is used to generate updated application protocol configuration data in response to the configuration parameter update information received in the parameter configuration interface, and update the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data.

[0061] The network security testing module 240 is used to identify the updated target image as the test target and perform network security tests that meet the network security testing requirements on the test target in the network range.

[0062] This invention, in response to network security testing requirements in a network range, acquires a pre-built target image from the network range. Further, it invokes a pre-set target proxy within the target image to obtain the first current application protocol configuration data of the built-in application protocol in the target image, and visualizes this data in a parameter configuration interface. After obtaining the visualization result of the first current application protocol configuration data in the parameter configuration interface, in response to configuration parameter update information received in the parameter configuration interface, it generates updated application protocol configuration data and updates the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data. The updated target image is then identified as the test target, and network security testing that meets network security testing requirements is performed on the test target in the network range. This solution solves the problems of large storage consumption, low scenario adaptability, and cumbersome and inefficient parameter configuration in existing test target construction processes, improving the adaptability flexibility of targets within the network range and increasing the efficiency of target parameter configuration.

[0063] Optionally, the above apparatus may further include a target image construction module, configured to, in response to input basic target configuration requirements, acquire at least one piece of software or hardware element information matching the basic target configuration requirements; construct a target base image based on each piece of software or hardware element information; create a target proxy within the target base image, wherein the target proxy includes multiple service interfaces, different service interfaces being used to implement different types of services; and call the registration interface in the target proxy to perform a registration operation on the application protocol configuration data of the built-in application protocol of the target base image, thereby obtaining the target image.

[0064] Optionally, the target image construction module is specifically used to: obtain standardized application protocol description data; call the registration interface in the target proxy to perform a registration operation on the application protocol configuration data of the built-in application protocol of the target base image according to the standardized application protocol description data, and obtain the target image.

[0065] Optionally, the first current application protocol configuration data visualization module 220 is specifically used to: call the communication access interface in the target proxy to obtain the original application protocol configuration data of the target image; convert the format of the original application protocol configuration data of the target image to obtain the first current application protocol configuration data, and visualize the first current application protocol configuration data in the parameter configuration interface.

[0066] Optionally, the application protocol parameter update module 230 is specifically used to: generate original updated application protocol configuration data in response to configuration parameter update information received in the parameter configuration interface; convert the format of the original updated application protocol configuration data to obtain the updated application protocol configuration data; and call the communication access interface in the target proxy to update the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data.

[0067] Optionally, the network security testing module 240 is specifically used to: call the communication access interface in the target proxy to obtain the second current application protocol configuration data of the target image again; compare and analyze the updated application protocol configuration data and the second current application protocol configuration data to determine the parameter update result of the built-in application protocol in the target image; and if it is determined that the parameter update result of the built-in application protocol in the target image is successful, determine the updated target image as the test target.

[0068] The aforementioned rapid target construction device for network ranges can execute the rapid target construction method for network ranges provided in any embodiment of the present invention, and possesses the corresponding functional modules and beneficial effects of the method. Technical details not described in detail in this embodiment can be found in the rapid target construction method for network ranges provided in any embodiment of the present invention.

[0069] Since the rapid target construction device for network ranges described above is an apparatus capable of executing the rapid target construction method for network ranges in the embodiments of the present invention, those skilled in the art can understand the specific implementation and various variations of the rapid target construction device for network ranges in this embodiment based on the rapid target construction method for network ranges described in the embodiments of the present invention. Therefore, how the rapid target construction device for network ranges implements the rapid target construction method for network ranges in the embodiments of the present invention will not be described in detail here. Any apparatus used by those skilled in the art to implement the rapid target construction method for network ranges in the embodiments of the present invention falls within the scope of protection of this application.

[0070] Example 3 Figure 3A schematic diagram of an electronic device 10, which can be used to implement embodiments of the present invention, is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0071] like Figure 3 As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 can also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0072] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0073] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as methods for rapidly constructing test targets in a cyber range.

[0074] In some embodiments, the method for rapidly constructing test targets in a cyber range can be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the method for rapidly constructing test targets in a cyber range described above can be performed. Alternatively, in other embodiments, processor 11 can be configured to execute the method for rapidly constructing test targets in a cyber range by any other suitable means (e.g., by means of firmware).

[0075] Optionally, the method for rapidly constructing test targets in a network range may include: in response to network security testing requirements in the network range, obtaining a pre-built target target image in the network range; calling a pre-set target target proxy in the target target image to obtain first current application protocol configuration data of the built-in application protocol in the target target image, and visually displaying the first current application protocol configuration data in a parameter configuration interface; in response to configuration parameter update information received in the parameter configuration interface, generating updated application protocol configuration data, and updating the parameters of the built-in application protocol in the target target image according to the updated application protocol configuration data; determining the updated target target image as a test target, and performing network security testing that meets the network security testing requirements on the test target in the network range.

[0076] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0077] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0078] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0079] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device for displaying information to the user (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor); and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0080] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or middleware components (e.g., application servers), or frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0081] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0082] This application also discloses a computer program product, which includes a computer program that, when executed by a processor, implements the rapid construction method for test targets in a network range provided in any embodiment of this application. This program product and the rapid construction method for test targets in a network range disclosed in the embodiments of this application belong to the same inventive concept, and therefore will not be described in detail here.

[0083] It should be understood that the various forms of processes shown above can be used to rearrange, add, or delete steps. For example, the steps described in this disclosure can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution disclosed in this disclosure can be achieved, and this is not limited herein.

[0084] The specific embodiments described above do not constitute a limitation on the scope of protection of this disclosure. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this disclosure should be included within the scope of protection of this disclosure.

Claims

1. A method for rapidly constructing test targets in a network firing range, characterized in that, include: In response to the network security testing requirements in the network range, obtain the pre-built target image in the network range; Call the preset target proxy in the target target image, obtain the first current application protocol configuration data of the built-in application protocol in the target target image, and visualize the first current application protocol configuration data in the parameter configuration interface; In response to the configuration parameter update information received in the parameter configuration interface, update application protocol configuration data is generated, and the parameters of the built-in application protocol in the target image are updated according to the update application protocol configuration data. The updated target image is identified as the test target, and a network security test that meets the network security test requirements is performed on the test target in the network range.

2. The method according to claim 1, characterized in that, Before acquiring the pre-built target image in the network range, the method further includes: In response to the input basic target configuration requirements, at least one piece of software or hardware element information matching the basic target configuration requirements is obtained; Based on the information of each of the aforementioned hardware and software elements, construct a basic image of the target; A target proxy is created within the base image of the target target. The target proxy includes multiple service interfaces, and different service interfaces are used to implement different types of services. The registration interface in the target proxy is called to perform the registration operation of the application protocol configuration data of the built-in application protocol on the target base image, thereby obtaining the target image.

3. The method according to claim 2, characterized in that, The step of calling the registration interface in the target proxy to perform the registration operation of the application protocol configuration data of the built-in application protocol on the target base image, thereby obtaining the target image, includes: Obtain standardized application protocol description data; The registration interface in the target proxy is invoked to perform a registration operation on the application protocol configuration data of the built-in application protocol on the target base image according to the standardized application protocol description data, thereby obtaining the target image.

4. The method according to any one of claims 1-3, characterized in that, The step of calling the pre-set target proxy in the target target image, obtaining the first current application protocol configuration data of the built-in application protocol in the target target image, and visually displaying the first current application protocol configuration data in the parameter configuration interface includes: Call the communication access interface in the target proxy to obtain the original application protocol configuration data of the target image; The original application protocol configuration data of the target image is converted to obtain the first current application protocol configuration data, and the first current application protocol configuration data is visualized in the parameter configuration interface.

5. The method according to any one of claims 1-3, characterized in that, The step of responding to configuration parameter update information received in the parameter configuration interface, generating updated application protocol configuration data, and updating the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data includes: In response to the configuration parameter update information received in the parameter configuration interface, generate the original update application protocol configuration data; The original update application protocol configuration data is converted to a new format to obtain the update application protocol configuration data. The communication access interface in the target proxy is invoked to update the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data.

6. The method according to claim 1, characterized in that, The step of determining the updated target image as the test target includes: The communication access interface in the target proxy is invoked again to obtain the second current application protocol configuration data of the target image; The updated application protocol configuration data and the second current application protocol configuration data are compared and analyzed to determine the parameter update result of the built-in application protocol in the target image. If the parameter update result of the built-in application protocol in the target image is determined to be successful, the updated target image is determined as the test target.

7. A rapid construction device for test targets in a network firing range, characterized in that, include: The target image acquisition module is used to acquire pre-built target images in the network range in response to network security testing requirements in the network range. The first current application protocol configuration data visualization module is used to call the preset target proxy in the target target image, obtain the first current application protocol configuration data of the built-in application protocol in the target target image, and visualize the first current application protocol configuration data in the parameter configuration interface. The application protocol parameter update module is used to respond to the configuration parameter update information received in the parameter configuration interface, generate updated application protocol configuration data, and update the parameters of the built-in application protocol in the target image according to the updated application protocol configuration data. The network security testing module is used to identify the updated target image as the test target and perform network security tests that meet the network security testing requirements on the test target in the network range.

8. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that is executed by the at least one processor to enable the at least one processor to perform a rapid construction method for test targets in a network range as described in any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that, when executed by a processor, implement the method for rapidly constructing test targets in any of claims 1-6 in a network range.

10. A computer program product, characterized in that, It includes a computer program / instruction, wherein when the computer program / instruction is executed by a processor, it implements a method for rapidly constructing test targets in a network range according to any one of claims 1-6.

Images