Intranet server discovery method, system and network security auditing system

An intranet server and discovery method technology, which is applied in the fields of systems and network security audit systems, and intranet server discovery methods, and can solve problems such as difficulty in discovering intranet additions or changes in time, and manual synchronization of server asset information.

Active Publication Date: 2020-08-28
BEIJING VENUS INFORMATION SECURITY TECH +1
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] In order to solve the above-mentioned technical problems, the present invention provides a method and system for discovering intranet servers, and a network security audit system to realize the purpose of automatically discovering intranet servers, and to solve the problem that the manual synchronization of server asset information in the prior art is difficult to timely Found problems such as adding or changing servers in the intranet

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Intranet server discovery method, system and network security auditing system
  • Intranet server discovery method, system and network security auditing system
  • Intranet server discovery method, system and network security auditing system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 2

[0159] In this embodiment, on the basis of identifying the server (IP is 192.168.182.120, port is 80, service type is http) in embodiment 1, a new session information is grabbed as session information:

[0160] (IP: 192.168.10.35, port: 3345->IP: 192.168.182.120, port: 80), the operation is as follows:

[0161] S101: Use the triple information (serverip: 192.168.182.120, port: 80, transproto: tcp) as the key to search in the preset database. At this time, the search is successful and enter S103;

[0162] S103: The status of this server is "recognized", indicating that the server corresponding to the session information has been recognized, and there is no need to repeat the recognition, and exit directly at this time;

[0163] Therefore, it can be known that this method does not identify all session information, but only identifies unidentified servers, newly added and changed servers.

[0164] The intranet server discovery system provided by the embodiment of the present app...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an intranet server discovery method and system, and a network security auditing system. The intranet server discovery method comprises the following steps: when session information is received, querying a preset database according to triplet information of the session information, when a server associated with the triplet information of the session information is not storedin the preset database, building a new incidence relation between a to-be-processed server and the triplet information of the session information in the preset database, updating statistical data ofthe to-be-processed server within a subsequent time threshold, and when the to-be-processed server satisfies a server screening condition, changing the state of the to-be-processed server into to-be-identified so as to achieve the purpose of discovering the new server in an intranet. Moreover, after the new server is identified, a service type loaded by the new server is identified to achieve thepurpose of accurately screening the server within the monitoring orientation of the intranet and the service type loaded by the server.

Description

technical field [0001] The present application relates to the technical field of network security, and more specifically, relates to a method and system for discovering an intranet server and a network security auditing system. Background technique [0002] With the continuous development of computer and network technology, the application of informatization in various institutions has become more and more extensive, which has effectively improved work efficiency. However, the application systems (servers) of these institutions carry key business information and user privacy, and gradually become the most strategic assets in the business system. How to use these data assets reasonably, legally and safely has brought severe challenges to data managers. . [0003] In order to protect these data assets, some network security audit systems have emerged, that is, compliance management audit products that conduct fine-grained audits of network operation behaviors in business envi...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L12/26
CPCH04L43/026H04L43/065H04L63/302
Inventor 陈泉清蒲俊龙邓鸿
Owner BEIJING VENUS INFORMATION SECURITY TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products