Method and apparatus for identify information assets

Abstract

The invention discloses an information asset identification method and a device. The method comprises the following steps: obtaining asset characteristic data of each logical entity in an informationsystem; determining a training sample set according to the asset characteristic data, wherein each sample in the training sample set corresponds to a unique logical entity; the training sample set being used to train the machine learning model in order to obtain the information system asset recognition classification model; obtaining target asset characteristic data of each target logical entity in the information system at the arrival of the update cycle; according to the characteristic data of the target assets, the classification of each target logical entity being determined by the asset recognition classification model of the information system. Compared with the prior art, the scheme of this embodiment not only needs no manual statistics, but also can identify the assets in the logical level.

Description

technical field [0001] The present invention relates to the technical fields of computer security and machine learning, in particular to an information asset identification method and device. Background technique [0002] Information security risk assessment is an integral part of the process of information system construction and operation and maintenance. The identification of information assets is the primary problem to be solved in information security risk assessment. [0003] Existing information asset identification methods are mainly realized through manual statistics or attaching a large number of additional devices to the information system. Although the method of artificial statistics can carry out a more comprehensive asset identification of the information system, considering the human factor, this method needs to consume a lot of time and human resources, the update time of the asset identification results is longer, and it is subject to statistical Restricte...

AI Technical Summary

Problems solved by technology

Although the method of artificial statistics can carry out a more comprehensive asset identification of the information system, considering the human factor, this method needs to consume a lot of time and human resources, the update time of the asset identification results is longer, and it is subject to statistical Restricted by factors such as personnel quality and ability, there are often some errors or omissions in the asset identification results at the logical level, and the subjectivity is too strong

However, the method of completing the identification of information system assets by attaching additional equipment to the information system also has the problem that the identification of assets in the system cannot be realized at the logical level.

Images