3 results about "Virtual network topology" patented technology

The present application relates to the field of network security, in particular to a data transmission method and system for device identity anonymous protection based on route hopping, the method comprising: generating a series of virtual network topologies based on real network nodes and false nodes; evaluating the nodes in the virtual network topologies to obtain a topology security level of the virtual network topologies, and taking the virtual network topologies with a topology security level greater than a preset threshold as a hopping pool; obtaining a hopping path satisfying a preset constraint condition in the hopping pool by using a backtracking method; screening the hopping path by using an evolutionary game model to obtain an optimal hopping strategy; and transmitting data based on the optimal hopping strategy. The present application firstly constructs multiple virtual network topologies to cause attack confusion, and simultaneously generates and selects a hopping path for the virtual network topologies to obtain a data transmission path with the highest security, thereby significantly improving the defense capability against network attacks.

The application belongs to the field of multi-fork tree virtual network construction, and discloses a multi-fork tree virtual network construction method on a single host, comprising the following steps: S1: abstract definition of a multi-fork tree virtual network node, definition of a network attribute set of the multi-fork tree virtual network node based on a logical node model; S2: standard encapsulation of atomic actions, decomposition of a multi-fork tree virtual network creation process into minimum granularity indivisible operations, i.e. atomic actions, based on a preset atomic action library; S3: topology arrangement and heterogeneous node configuration generation based on layer sequence traversal, completion of multi-fork tree virtual network topology generation by inputting an atomic action list and executing atomic actions on corresponding nodes; and S4: instantiation execution of the multi-fork tree virtual network and mounting on underlying resources, conversion of the corresponding configuration of step S3 into entity resources in a host kernel by a virtual instantiation engine. Thus, the application realizes construction of a large-scale, high-fidelity and easily reconfigurable multi-level tree-shaped virtual network.

This application discloses a target range platform for network security exercises, comprising: a heterogeneous virtualization environment construction module for constructing a locally virtualized target machine environment; a traffic recording and review module; and a console module. The heterogeneous virtualization environment construction module includes a construction submodule and a routing and forwarding submodule. The construction submodule is used to construct the target machine environment using hybrid virtualization technology. The target machine environment includes several target machines and several network devices. The target machines and network devices, as well as the target machines themselves, are connected via virtual communication links, forming a virtual network topology with an undirected graph structure. The routing and forwarding submodule is also used to achieve network isolation between the target machine environment and the external network by responding to outbound routing blocking policies. This enables localized deployment of the target machine environment and isolates external network connections during network security exercises, eliminating the need for traffic backhaul and reducing the risk of data leakage.