A method and device for network asset risk portrait

Abstract

The application provides a network asset risk portraying method and a network asset risk portraying device, capable of improving network security protection efficiency. The network asset risk portraying method comprises: obtaining a target root domain name corresponding to the network asset to be portrayed; obtaining a sub-domain name included in the target root domain name; performing vulnerability scanning on the obtained sub-domain name to obtain vulnerabilities existing in the obtained sub-domain name; classifying the risk points of the obtained vulnerabilities according to the pre-set risk point classification strategy, and performing risk portrait on the network assets to be portrayed according to the classified risk points.

Description

technical field [0001] The present application relates to the technical field of network asset security, and in particular, to a method and device for network asset risk profiling. Background technique [0002] Network security protection is one of the main technical means to protect the network of each institution or enterprise from hacker attacks, especially the massive data interactive application network that applies new technologies such as the Internet of Things, cloud computing, and big data, and data and user information leakage, etc. Network security issues are becoming more and more prominent. Once the application network is attacked, it will cause immeasurable losses. [0003] At present, network security protection adopts a passive single-point defense method, that is, after a network attack situation occurs, vulnerability remediation is carried out. Since network attacks can be completed within minutes, the industry finds that the average detection time of attac...

AI Technical Summary

Problems solved by technology

[0003] At present, network security protection adopts a passive single-point defense method, that is, after a network attack situation occurs, vulnerability remediation is carried out. Since network attacks can be completed within minutes, the industry finds that the average detection time of attacks (MTTD, Mean Time To Detection) reached 84 days, and it was found that the average response time (MTTR, Mean Time To Repair) after a network attack also reached 7 days, which often led to a large amount of data and user information leakage, and network security protection lacked flexibility, initiative, and security. Low protection efficiency

Images