Method and system for equipment security management in security management and control platform

Abstract

The present invention discloses an equipment safety management method in a safety management and control platform and an equipment safety management system in the safety management and control platform, and relates to the network information safety technology field. According to the embodiment of the present invention, by the existing equipment information, all networking equipment, the unknown equipment which are not recorded in the safety management and control platform and the changed known equipment can be discovered, the disadvantage of a conventional equipment management method that after a system operates a period of time, the equipment information loses efficacy gradually along with the system change is made up, the networking unknown equipment can be discovered completely and accurately, and a distributed multiprocess concurrent automated collection framework enables the discovery efficiency of the unknown equipment to be improved greatly, so that the enterprises can know the equipment situation in a network clearly, and the grasp and control potencies of the enterprises to the information safety are improved. According to the present invention, the PING scripts can be generated automatically and dynamically according to the equipment network division situations, and all IPs which may be communicated can be examined by the PING operation; the acquired MAC / IP addresses can be merged by an MAC / IP address set of the known equipment, thereby reducing the misinformation.

Description

technical field [0001] The invention relates to the technical field of network information security, in particular to a method and system for equipment security management in a security management and control platform. Background technique [0002] With the rapid development and popularization of the Internet, major enterprises have increased investment in the construction of IT systems, resulting in the continuous increase of various application systems and the number of users, the rapid expansion of the network scale, and the information security problems faced by enterprises have become more and more prominent. By building a security management and control platform and doing fine-grained management in accordance with industry standards, we can truly achieve strict management of the internal network, control, limit and track user behavior, and determine whether user behavior has brought significant impact on the safe operation of the enterprise internal network. threaten. ...

AI Technical Summary

Problems solved by technology

[0005] 1) Unable to discover devices that have not been entered into the security management and control platform

[0006] The existing security management and control platform relies on manual input of device information, but in medium and large enterprises, the private network structure is complex, the number of devices and the types of devices are numerous, and it is easy to miss during the input process, and the existing resource management system lacks verification The ability and means to discover online devices that are not connected to the resource management system

[0007] 2) Unable to grasp the current existence of the equipment

[0013] 3) Manual verification of equipment information is time-consuming and laborious

The current manual verification method is time-consuming and laborious and cannot meet the management needs. We urgently need an automated verification method

Images