一种基于攻击链状态机与智能资源池的网络安全实践教学系统及方法

By constructing an attack chain state machine and an intelligent resource pool, the network security practice teaching system solves the problems of container startup delay, high concurrency pressure, security isolation, and learning analysis in network security teaching platforms. It realizes a fast, secure, and intelligent teaching environment and prompting mechanism, improving user experience and teaching effectiveness.

CN122226523BActive Publication Date: 2026-07-17SOUTHWEST PETROLEUM UNIV

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
SOUTHWEST PETROLEUM UNIV
Filing Date
2026-05-21
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing cybersecurity teaching platforms suffer from issues such as high container startup latency, lack of adaptive learning guidance, lack of deep security isolation between multi-user containers, and limited dimensions of teaching effectiveness data, which affect the smoothness of teaching and user experience.

Method used

A cybersecurity practical teaching system based on attack chain state machine and intelligent resource pool is constructed. Through initial hot standby container resource pool, dynamic minimum water level value calculation, asynchronous preheating task, bypass image acquisition and multi-dimensional learning analysis, it realizes second-level target range environment configuration, adaptive teaching prompts and multi-layer security isolation.

Benefits of technology

Significantly shorten container readiness time, improve teaching fluency, provide precise teaching prompts, achieve strong security isolation and multi-dimensional learning analysis, and improve teaching quality and user experience.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122226523B_ABST
    Figure CN122226523B_ABST
Patent Text Reader

Abstract

本发明公开了一种基于攻击链状态机与智能资源池的网络安全实践教学系统及方法,涉及网络安全教学技术领域。本方法按漏洞类型构建热备容器资源池,基于历史访问频次计算动态最小水位值,通过异步预热维持资源水位,实现靶场秒级就绪;采用ConfigMap局部更新接口将会话级UUID动态标识码注入运行中的容器,实现环境个性化配置与防作弊;以Sidecar模式旁路采集HTTP流量,通过正则匹配驱动攻击链状态机迁移,结合用户停留时长递进推送自适应提示;基于命名空间、网络策略及资源配额构建五层隔离体系,并采集攻击链与解题效率等多维数据执行学情预警。本发明提升了教学流畅度与安全性。
Need to check novelty before this filing date? Find Prior Art