Distributed asset identification and change awareness method and system for implementing vulnerability management

Abstract

A distributed asset identification and change awareness system for implementing vulnerability management includes a plurality of network asset information collection subsystems distributed in different regions and a distributed task scheduling and data processing subsystem, wherein tasks are decomposed based on a distributed architecture and allocated to appropriate resources through the task scheduling, task distribution and processing are realized for a plurality of nodes, and asset information detection and sensing are distributedly performed; the network asset information collection subsystems collect asset information of the networked active host; the data processing part of the distributed task scheduling and data processing subsystem obtains the asset information of the networked active host from the network asset information collection subsystems, and compares the asset information with the confirmed asset attribute information stored in the asset library to realize the automatic update of the asset information for the networked surviving host in the asset library. Vulnerability information is collected though vulnerability scanning, which may quickly treat and fix securityvulnerabilities in networked information systems.

Description

technical field [0001] The invention relates to network asset information security, in particular to a distributed asset identification and change perception method and system for realizing loophole management. Background technique [0002] Information system cyberspace is composed of numerous nodes, each node is an IT asset (or information asset) connected to the network, and information assets include host operating systems, network devices, security devices, databases, middleware, and application components. Information assets are the most basic and important carrier in information security management. With the continuous growth of the internal business of the enterprise and the rapid development of business informatization, various business support platforms and management systems are becoming more and more complex. As the resources become richer and richer, the asset management work brought to administrators becomes more and more difficult. Over time, a large number o...

AI Technical Summary

Problems solved by technology

Over time, a large number of unowned assets and zombie assets have been generated. These assets have not been maintained for a long time, resulting in more known vulnerabilities and configuration violations.

What's more serious is that these assets are difficult to be included in the daily maintenance scope of administrators, which brings great hidden dangers to enterprise security and becomes the weakness of enterprise information security.

[0003] Taking the power grid as an example, common power information equipment, such as servers, switches, routers, power communication terminals, smart power transformation equipment, etc., once a security problem occurs, it will affect the normal acquisition of power information and the normal supply of power services, which will not only bring people Daily production and life bring a lot of inconvenience, but also cause great economic losses

Images