A digital wind tunnel based method and system for managing risk inspections

Abstract

The application provides a kind of based on digital wind tunnel management risk inspection method and system, method includes according to the management risk scene to be checked, in combination with general load library and special risk load library, automatically generate risk test case;Utilize automated risk verification tool, execute the risk test case in digital wind tunnel, identify potential risk point;Risk assessment is carried out to risk point, and risk level and influence range are determined;According to risk assessment result, trigger early warning and generate risk processing suggestion;The risk point that has been processed is executed automated retest, and risk state is updated according to retest result.The application expands coverage range by automatically combining test case of general and special load library, realizes non-intrusive safety simulation based on digital wind tunnel, integrates automated retest to verify repair effect, uses graph calculation to analyze risk propagation path and influence range in combination with organizational structure and business dependency, improves risk discovery comprehensiveness, management reliability and evaluation objectivity.

Description

Technical Field

[0001] This invention relates to the field of enterprise management risk detection technology, specifically to a management risk inspection method and system based on digital wind tunnel. Background Technology

[0002] In modern enterprise management, risk management checks are a crucial step in ensuring compliance and stable operation. Traditional risk management checks rely heavily on human experience, involving manually designing check items, executing check processes, and assessing risks. This approach has significant drawbacks: First, it is inefficient, as manual checks are slow and struggle to handle massive business processes and complex system interactions; second, it lacks accuracy, as the experience and time of the checkers can easily overlook key risks; third, it has limited coverage, as it is difficult for humans to exhaustively identify all possible abnormal scenarios and boundary conditions; and finally, it has a long feedback cycle, with a slow closed-loop process of risk discovery, verification, remediation, and retesting, hindering rapid response.

[0003] With the development of information technology, automated security inspection tools have emerged, such as vulnerability scanners. However, these tools typically focus on technical security vulnerabilities (such as code defects and configuration errors), lacking the ability to deeply inspect risks at the enterprise management process level. For example, unauthorized operations in the fund approval process and compliance risks in the procurement process are difficult to detect using traditional technical scanning tools. Furthermore, existing solutions are insufficient in risk verification and closed-loop management, often performing only one-time checks and lacking automated retesting and confirmation mechanisms for the effectiveness of risk remediation, meaning risks may not be completely eradicated. Summary of the Invention

[0004] This invention aims to provide a management risk inspection method and system based on digital wind tunnel, which solves the technical problems of existing technologies such as reliance on manual labor, low efficiency, limited coverage, lack of automated retesting and real-time feedback, improves the accuracy and efficiency of risk identification, standardizes enterprise management processes, and reduces risks in the management process.

[0005] To solve the above-mentioned technical problems, the present invention provides the following technical solution: In a first aspect, the present invention provides a management risk inspection method based on a digital wind tunnel, the method comprising: Based on the management risk scenarios to be inspected, risk test cases are automatically generated by combining general load libraries and dedicated risk load libraries. Using automated risk verification tools, the risk test cases are executed in a digital wind tunnel to identify potential risk points; Conduct risk assessments on risk points to determine their risk levels and scope of impact; Based on the pre-built risk handling library, the system triggers early warnings and generates risk handling suggestions according to the risk assessment results. Perform automated retesting on the risks that have been addressed, and update the risk status based on the retesting results.

[0006] In one embodiment, the step of automatically generating risk test cases based on the management risk scenario to be inspected, combining a general load library and a dedicated risk load library, includes: Select standardized risk test scripts related to the risk management scenario from the general load library; Call risk test scripts customized for specific industries or businesses from a dedicated risk load library; By combining standardized risk test scripts with customized risk test scripts and configuring parameters, risk test cases can be generated.

[0007] In one embodiment, the step of using automated risk verification tools to execute the risk test cases in a digital wind tunnel and identify potential risk points includes: Construct test scenarios simulating the target enterprise's operating environment in a digital wind tunnel; Load risk test cases into the test scenario to simulate risky behaviors; By monitoring system responses, data streams, or log changes in the test scenario, risk characteristics are automatically identified and captured, forming a list of risk points.

[0008] In one embodiment, the risk assessment of risk points to determine the risk level and scope of impact includes: Based on the pre-set risk level assessment rules, the risk level of each risk point is determined according to its degree of impact. By using graph computing technology, we can analyze the propagation path of risk points in the enterprise's organizational structure and business dependency graph, and quantify the scope of impact.

[0009] In one embodiment, the step of triggering an early warning and generating risk handling suggestions based on the risk assessment results using a pre-set risk handling library includes: For risk points assessed as high-level, real-time early warning information is generated and pushed out. Based on the type of risk point, match the corresponding risk treatment suggestions from the hotfix solution library; Generate a comprehensive risk report that includes risk details, assessment results, and remediation recommendations.

[0010] In one embodiment, the step of performing automated retesting on the processed risk points and updating the risk status based on the retesting results includes: Upon receiving the instruction that risk remediation is complete, the automated risk verification tool is automatically dispatched to retest the remediated scenario based on the original risk test cases. If the risk characteristics disappear when the retest results are compared with the original test data, the status of the risk point will be updated to "repaired"; otherwise, the warning will be triggered again.

[0011] Secondly, the present invention provides a management risk inspection system based on a digital wind tunnel, the system comprising: Generation module: Used to automatically generate risk test cases based on the management risk scenarios to be inspected, combining the general load library and the dedicated risk load library; Identification module: Used to execute the risk test cases in a digital wind tunnel using automated risk verification tools to identify potential risk points; Assessment module: Used to assess risk points, determine risk level and scope of impact; Processing module: Used to trigger alerts and generate risk handling suggestions based on the risk assessment results from a pre-built risk handling library; Retesting module: Used to perform automated retesting on the processed risk points and update the risk status based on the retesting results.

[0012] In one embodiment, the generation module is specifically used for: Select standardized risk test scripts related to the risk management scenario from the general load library; Call risk test scripts customized for specific industries or businesses from a dedicated risk load library; By combining standardized risk test scripts with customized risk test scripts and configuring parameters, risk test cases can be generated.

[0013] In one embodiment, the identification module is specifically used for: Construct test scenarios simulating the target enterprise's operating environment in a digital wind tunnel; Load risk test cases into the test scenario to simulate risky behaviors; By monitoring system responses, data streams, or log changes in the test scenario, risk characteristics are automatically identified and captured, forming a list of risk points.

[0014] In one embodiment, the evaluation module is specifically used for: Based on the pre-set risk level assessment rules, the risk level of each risk point is determined according to its degree of impact. By using graph computing technology, we can analyze the propagation path of risk points in the enterprise's organizational structure and business dependency graph, and quantify the scope of impact.

[0015] In one embodiment, the processing module is specifically used for: For risk points assessed as high-level, real-time early warning information is generated and pushed out. Based on the type of risk point, match the corresponding risk treatment suggestions from the hotfix solution library; Generate a comprehensive risk report that includes risk details, assessment results, and remediation recommendations.

[0016] In one embodiment, the retesting module is specifically used for: Upon receiving the instruction that risk remediation is complete, the automated risk verification tool is automatically dispatched to retest the remediated scenario based on the original risk test cases. If the risk characteristics disappear when the retest results are compared with the original test data, the status of the risk point will be updated to "repaired"; otherwise, the warning will be triggered again.

[0017] Thirdly, the present invention provides an electronic device, comprising: a processor and a memory; The memory is used to store computer programs; The processor is configured to execute a management risk inspection method based on a digital wind tunnel provided in any of the first aspects by invoking the computer program.

[0018] Fourthly, the present invention provides a computer-readable storage medium comprising a program, which, when executed by a processor, is used to implement a management risk inspection method based on a digital wind tunnel provided in any of the first aspects.

[0019] Compared with the prior art, the present invention has the following advantages: 1. By establishing a general load library and a dedicated risk load library, this invention can automatically combine and configure test cases according to the inspection target, expand the coverage of risk inspection, realize the leap from limited manual scenarios to massive automated scenarios, and improve the comprehensiveness of risk discovery.

[0020] 2. This invention uses a digital wind tunnel to safely simulate various risky operations using risk test cases. Without interfering with the real production system, it enables proactive, controllable, and non-intrusive testing of management process risks, solving the problem that traditional methods are difficult to reproduce risks in real environments or may cause secondary risks.

[0021] 3. This invention not only performs initial risk discovery but also integrates automated retesting. Once a risk is marked as fixed, the original test cases are automatically re-executed to verify the effectiveness of the fix, ensuring that the risk is truly eliminated. This avoids incomplete fixes or risk recurrence, significantly improving the reliability of risk management.

[0022] 4. In the risk assessment stage, this invention utilizes graph computing technology, combined with the enterprise's organizational structure and business dependency graph, to analyze the propagation path and scope of impact of risk points, making the risk assessment results more objective and quantitative, and helping managers to prioritize the handling of high-risk risks that affect core businesses. Attached Figure Description

[0023] Figure 1 The diagram shown is a flowchart of a management risk inspection method based on a digital wind tunnel according to an embodiment of the present invention. Figure 2 The diagram shown is a structural schematic of a management risk inspection system based on a digital wind tunnel according to an embodiment of the present invention. Figure 3 The diagram shown is a structural schematic of an electronic device according to an embodiment of the present invention. Detailed Implementation

[0024] To make the objectives, technical solutions, and advantages of this invention clearer and more understandable, the invention will be further described below in conjunction with the accompanying drawings and specific embodiments. Obviously, the described embodiments are merely some embodiments of this invention, and not all embodiments. Based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this invention.

[0025] Based on the shortcomings of existing technologies, please refer to Figure 1 This embodiment describes in detail a management risk inspection method based on a digital wind tunnel, which includes the following steps: S110: Based on the management risk scenario to be inspected, risk test cases are automatically generated by combining the general load library and the dedicated risk load library.

[0026] Specifically, based on the risk inspection task selected by the user (e.g., procurement approval process risk inspection), the system first selects standardized risk test scripts related to the management risk scenario from the general load library (which stores standardized management risk test scripts), such as access violation detection scripts and approval process integrity verification scripts. Simultaneously, it calls risk test scripts customized for specific industries or businesses from the dedicated risk load library (which stores customized test scripts for specific industries or enterprises), such as compliance check scripts for procurement regulations in a particular industry. The standardized and customized risk test scripts are then combined and their parameters are configured (e.g., target system URL, test account, amount threshold, etc.) to automatically generate a complete and executable set of risk test cases.

[0027] More specifically, the process begins by selecting test scripts related to the target management risk scenarios from both the general and specialized risk load libraries. After validating the scripts, the general and customized scripts are combined into an ordered test flow according to the detection logic. A visual configuration form is then automatically generated for the combined scripts. After parameter input, the parameters are validated in real time for format, business rules, and relevance. Once validated, a structured parameter mapping table is generated. Next, the process configuration and parameter mapping table of the combined scripts are summarized using a unique test case identifier. Following a unified executable test case specification, a structured test case file containing basic information, execution flow, parameter configuration, runtime environment, and execution rules is automatically generated. Finally, the executability of the test cases is validated. Once validated, the test case status is updated to executable, thus completing the fully automated generation of risk test cases.

[0028] Compared to existing technologies that rely on manual, line-by-line test case writing, which is time-consuming and limited to a single scenario, this invention utilizes a combination of general and specialized load libraries with automated configuration to achieve rapid, modular construction of test cases. This covers both standard compliance scenarios and customized scenarios, significantly improving the scope and efficiency of risk checks.

[0029] S120: Using automated risk verification tools, execute the risk test cases in a digital wind tunnel to identify potential risk points.

[0030] The purpose of this step is to perform tests in a digital wind tunnel to identify risks. A digital wind tunnel is a risk testing environment based on digital simulation technology, which conducts risk stress tests by simulating enterprise operation scenarios. In the digital wind tunnel environment, simulated enterprise business system images and processes are deployed to build test scenarios that simulate the target enterprise's operating environment. Then, the generated risk test cases are loaded into the test scenarios and executed by automated risk verification tools (which can be understood as a set of automated testing engines that include test script execution, monitoring, and result capture functions) to simulate risky behaviors. For example, the tool will automatically simulate a process where a low-level employee submits an excessively large purchase order. By monitoring the system response, data flow, and log records of the test scenarios (such as a simulated approval system) in the digital wind tunnel to ensure compliance and the effectiveness of permission checks, abnormal behaviors (i.e., risk characteristics) are automatically identified and captured, ultimately forming a list of risk points.

[0031] More specifically, the risk point identification method in this step includes: data analysis of the original dataset (i.e., system response, data flow, and log records); detection of abnormal operations using the DBSCAN clustering algorithm; discovery of high-frequency risk combinations through Apriori association rule mining; generation of a risk feature vector set; training an XGBoost classification model based on historical risk-labeled data (i.e., labeled risk cases); inputting the risk feature vector set into the classification model; and outputting the risk probability. When the risk probability is greater than a preset threshold (in this embodiment, the preset threshold can be set to 0.9), it is marked as a risk point and associated with the corresponding test cases to form a risk point list containing information such as risk type and location. The accuracy of the XGBoost classification model is no less than 95%, ensuring the accuracy of risk identification.

[0032] Compared to traditional manual inspections or simple script scans that cannot simulate complete business process interactions, the embodiments of this invention simulate real interactions in an isolated digital wind tunnel, which can discover deeper, cross-system process logic risks. By associating test cases in the load library, it provides a basis for subsequent risk verification and retesting, and can solve the technical problems of low risk identification efficiency and poor accuracy in the prior art.

[0033] S130: Conduct risk assessments on risk points to determine the risk level and scope of impact.

[0034] The purpose of this step is to assess the risk level and impact scope of the risk point, based on pre-defined risk level assessment rules. Risk levels are categorized as high-risk (L1), medium-risk (L2), and low-risk (L3). L1 corresponds to direct economic losses exceeding 1 million RMB (e.g., misappropriation of funds), L2 to process stagnation exceeding 24 hours (e.g., approval delays), and L3 to minor efficiency losses (e.g., form completion errors). Simultaneously, the company's organizational chart and business dependency graph are retrieved. Graph computing algorithms are used to analyze which departments (purchasing department, finance department) and related business lines (supplier management, payment processes) will be affected by the procurement approval vulnerability. The PageRank graph computing algorithm can be used to locate the core affected nodes (i.e., risk points), quantifying the number of affected departments, related business lines, and the amount of data involved to determine the scope of the risk. For example, the impact scope of the procurement approval vulnerability might be the purchasing department, finance department, and three supplier links, thereby generating a quantified impact scope description and topology diagram.

[0035] Compared to traditional risk assessments that rely heavily on subjective judgment, this invention employs quantitative rules and graph calculation techniques to make the determination of risk levels and scope of impact more objective and accurate, providing a scientific basis for risk prioritization.

[0036] S140: Based on the pre-built risk handling library, trigger an early warning and generate risk handling suggestions according to the risk assessment results.

[0037] The purpose of this step is to generate early warnings and handling recommendations. For risk points assessed as high-level, real-time early warning information is generated and pushed out; and based on the type of risk point, corresponding risk handling recommendations are matched from the hotfix solution library; finally, a comprehensive risk report containing risk details, assessment results, and remediation recommendations is generated. More specifically, real-time early warnings are triggered for high-risk L1 and medium-risk L2 risk points to ensure that management personnel are informed of high-risk information as soon as possible; at the same time, based on the risk type, pre-set remediation recommendations are automatically matched from the hotfix solution library, such as forcibly enabling a dual-person review mechanism for amounts exceeding a certain threshold, and a comprehensive risk report is generated. The comprehensive risk report includes basic information, risk details, and visualization charts; basic signals include task ID, detection time, and participating personnel; risk details include risk point location such as URL / system module, risk level, and payload number; visualization charts include risk distribution heatmaps and impact range topology maps; the report supports subscription and download, and risk trend reports (such as monthly high-risk vulnerability statistics) can be obtained regularly. The report supports PDF / Excel format download for auditing purposes.

[0038] The real-time early warning function of this invention enables timely feedback of high risks, and the risk handling suggestion function realizes the linkage from risk discovery to handling suggestions, changing the lagging state of report generation and handling plan separation in the traditional method. The detailed risk report provides managers with comprehensive risk information.

[0039] S150: Perform automated retesting on the processed risk points and update the risk status based on the retesting results.

[0040] The purpose of this step is to automate retesting and risk closed-loop management. Upon receiving the instruction that risk remediation is complete, an automated risk verification tool is automatically scheduled to retest the remediated scenario based on the original risk test cases. The retest results are compared with the original test data. If the risk characteristics have disappeared, the risk point status is updated to "remediated"; otherwise, the alert is retried. Specifically, when administrators remediate the vulnerability according to the recommendations, the risk is marked as remediated. An automated verification tool (such as the Burp Suite automation module, which implements third-party platform authentication vulnerabilities through customized security risk retesting, utilizes the Burp API for automatic scheduling, reuses original security test cases, and allows for customized scanning logic, suitable for complex security risk characteristic detection) runs the original test cases that discovered the risk again in a digital wind tunnel. If the retest passes, the risk status is automatically updated to "closed-loop"; if the retest fails, the alert is retried to notify that the remediation was unsuccessful.

[0041] This embodiment ensures that every discovered risk is effectively eradicated through automated retesting, avoiding risk residue and forming a complete management closed loop from discovery, assessment, remediation to verification, which greatly improves the reliability of risk control.

[0042] Based on the same inventive concept, this application also provides a management risk inspection system based on a digital wind tunnel, which can be used to implement the management risk inspection method based on a digital wind tunnel described in the above embodiments, as shown in the following embodiments. Since the principles and methods for solving the problem are similar, the implementation of the system can refer to the method implementation, and repeated details will not be elaborated further. As used below, the terms "unit" or "module" can refer to a combination of software and / or hardware that performs a predetermined function. Although the system described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.

[0043] This invention provides a management risk inspection system based on a digital wind tunnel, such as... Figure 2 As shown, the system includes: Generation module 210: Used to automatically generate risk test cases based on the management risk scenarios to be inspected, combining the general load library and the dedicated risk load library; Identification module 220: Used to identify potential risk points by executing risk test cases in a digital wind tunnel using automated risk verification tools; Assessment module 230: Used to conduct risk assessments on risk points, determine the risk level and scope of impact; Processing module 240: Used to trigger early warnings and generate risk handling suggestions based on the risk assessment results from a pre-built risk handling library; Retesting module 250: Used to perform automated retesting on the processed risk points and update the risk status based on the retesting results.

[0044] In one embodiment of the present invention, the generation module 210 is specifically used for: Select standardized risk test scripts related to the risk management scenario from the general load library; Call risk test scripts customized for specific industries or businesses from a dedicated risk load library; By combining standardized risk test scripts with customized risk test scripts and configuring parameters, risk test cases can be generated.

[0045] In one embodiment of the present invention, the identification module 220 is specifically used for: Construct test scenarios simulating the target enterprise's operating environment in a digital wind tunnel; Load risk test cases into the test scenario to simulate risky behaviors; By monitoring system responses, data streams, or log changes in test scenarios, risk characteristics are automatically identified and captured, forming a list of risk points.

[0046] In one embodiment of the present invention, the evaluation module 230 is specifically used for: Based on the pre-set risk level assessment rules, the risk level of each risk point is determined according to its degree of impact. By using graph computing technology, we can analyze the propagation path of risk points in the enterprise's organizational structure and business dependency graph, and quantify the scope of impact.

[0047] In one embodiment of the present invention, the processing module 240 is specifically used for: For risk points assessed as high-level, real-time early warning information is generated and pushed out. Based on the type of risk point, match the corresponding risk treatment suggestions from the hotfix solution library; Generate a comprehensive risk report that includes risk details, assessment results, and remediation recommendations.

[0048] In one embodiment of the present invention, the retesting module 250 is specifically used for: Upon receiving the instruction that risk remediation is complete, the automated risk verification tool is automatically dispatched to retest the remediated scenario based on the original risk test cases. Compare the retest results with the original test data. If the risk characteristics disappear, update the risk point status to "repaired"; otherwise, re-trigger the warning.

[0049] This application also provides a specific implementation of an electronic device capable of implementing all the steps in the methods described above. See [link to implementation details]. Figure 3 The electronic device 300 specifically includes the following: Processor 310, memory 320, communication unit 330 and bus 340; The processor 310, memory 320, and communication unit 330 communicate with each other via bus 340; the communication unit 330 is used to realize information transmission between server-side devices and terminal devices and other related devices.

[0050] The processor 310 is used to call the computer program in the memory 320. When the processor executes the computer program, it implements all the steps in the method in the above embodiments.

[0051] Those skilled in the art will understand that memory can be, but is not limited to, Random Access Memory (RAM), Read-Only Memory (ROM), Programmable Read-Only Memory (PROM), Erasable Programmable Read-Only Memory (EPROM), and Electrically Erasable Programmable Read-Only Memory (EEPROM). The memory stores programs, which are then executed by the processor upon receiving execution instructions. Furthermore, the software program modules within the aforementioned memory may also include an operating system, which may include various software components and / or drivers for managing system tasks (e.g., memory management, storage device control, power management, etc.) and can communicate with various hardware or software components to provide an operating environment for other software components.

[0052] A processor can be an integrated circuit chip with signal processing capabilities. The aforementioned processor can be a general-purpose processor, including a Central Processing Unit (CPU), a Network Processor (NP), etc. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor.

[0053] This application also provides a computer-readable storage medium including a program that, when executed by a processor, performs the method provided in any of the foregoing method embodiments.

[0054] Those skilled in the art will understand that all or part of the steps in the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks, and this application does not limit the specific type of media.

[0055] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention in any way. Although the present invention has been disclosed above with reference to preferred embodiments, it is not intended to limit the present invention. Any person skilled in the art can make some modifications or alterations to the above-disclosed technical content to create equivalent embodiments without departing from the scope of the present invention. Any simple modifications, equivalent changes and alterations made to the above embodiments based on the technical essence of the present invention without departing from the scope of the present invention are within the scope of the present invention.

Claims

1. A management risk inspection method based on digital wind tunnel, characterized in that, include: Based on the management risk scenarios to be inspected, risk test cases are automatically generated by combining general load libraries and dedicated risk load libraries. Using automated risk verification tools, the risk test cases are executed in a digital wind tunnel to identify potential risk points; Conduct risk assessments on risk points to determine their risk levels and scope of impact; Based on the pre-built risk handling library, the system triggers early warnings and generates risk handling suggestions according to the risk assessment results. Perform automated retesting on the risks that have been addressed, and update the risk status based on the retesting results.

2. The management risk inspection method based on a digital wind tunnel as described in claim 1, characterized in that, The automatic generation of risk test cases based on the management risk scenarios to be inspected, combined with a general load library and a dedicated risk load library, includes: Select standardized risk test scripts related to the risk management scenario from the general load library; Call risk test scripts customized for specific industries or businesses from a dedicated risk load library; By combining standardized risk test scripts with customized risk test scripts and configuring parameters, risk test cases can be generated.

3. The management risk inspection method based on a digital wind tunnel as described in claim 1, characterized in that, The step of using automated risk verification tools to execute the risk test cases in a digital wind tunnel to identify potential risk points includes: Construct test scenarios simulating the target enterprise's operating environment in a digital wind tunnel; Load risk test cases into the test scenario to simulate risky behaviors; By monitoring system responses, data streams, or log changes in the test scenario, risk characteristics are automatically identified and captured, forming a list of risk points.

4. The management risk inspection method based on a digital wind tunnel as described in claim 1, characterized in that, The risk assessment of risk points, and the determination of risk level and scope of impact, includes: Based on the pre-set risk level assessment rules, the risk level of each risk point is determined according to its degree of impact. By using graph computing technology, we can analyze the propagation path of risk points in the enterprise's organizational structure and business dependency graph, and quantify the scope of impact.

5. The management risk inspection method based on a digital wind tunnel as described in claim 1, characterized in that, The pre-built risk handling library triggers early warnings and generates risk handling suggestions based on risk assessment results, including: For risk points assessed as high-level, real-time early warning information is generated and pushed out. Based on the type of risk point, match the corresponding risk treatment suggestions from the hotfix solution library; Generate a comprehensive risk report that includes risk details, assessment results, and remediation recommendations.

6. The management risk inspection method based on a digital wind tunnel as described in claim 1, characterized in that, The automated retesting of processed risk points and the updating of risk status based on the retesting results include: Upon receiving the instruction that risk remediation is complete, the automated risk verification tool is automatically dispatched to retest the remediated scenario based on the original risk test cases. If the risk characteristics disappear when the retest results are compared with the original test data, the status of the risk point will be updated to "repaired"; otherwise, the warning will be triggered again.

7. A management risk inspection system based on a digital wind tunnel, characterized in that, The system includes: Generation module: Used to automatically generate risk test cases based on the management risk scenarios to be inspected, combining the general load library and the dedicated risk load library; Identification module: Used to execute the risk test cases in a digital wind tunnel using automated risk verification tools to identify potential risk points; Assessment module: Used to assess risk points, determine risk level and scope of impact; Processing module: Used to trigger alerts and generate risk handling suggestions based on the risk assessment results from a pre-built risk handling library; Retesting module: Used to perform automated retesting on the processed risk points and update the risk status based on the retesting results.

8. The management risk inspection system based on a digital wind tunnel as described in claim 7, characterized in that, The generation module is specifically used for: Select standardized risk test scripts related to the risk management scenario from the general load library; Call risk test scripts customized for specific industries or businesses from a dedicated risk load library; By combining standardized risk test scripts with customized risk test scripts and configuring parameters, risk test cases can be generated.

9. An electronic device, characterized in that, include: Processor and memory; The memory is used to store computer programs; The processor is configured to execute the method as described in any one of claims 1 to 6 by invoking the computer program.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a program that, when executed by a processor, is used to implement the method of any one of claims 1 to 6.

Images