Method and system for detecting distributed asset information

Abstract

The invention discloses a method and system for detecting distributed asset information. The system comprises a plurality of network asset information collecting subsystems distributedly deployed in different regions and a distributed task scheduling and data processing subsystem connecting the plurality of network asset information collecting subsystems, wherein based on a distributed architecture, the distributed task scheduling and data processing subsystem decomposes tasks, and distributes the decomposed tasks to appropriate resources through task scheduling, so as to implement task distribution and processing for a plurality of nodes, implement distributed execution of tasks, and distributedly perform the asset information detection and perception, and the storage and management of data are deposited together. The method and system for detecting distributed asset information can detect active hosts of a plurality of specific network areas in a timely and reliable manner, and collect asset information, which provides basic functions for asset change perception, and facilitates rapid and accurate discovery to timely repair security vulnerabilities of information system.

Description

technical field [0001] The invention relates to network asset information security, in particular to a distributed asset information detection method and system. Background technique [0002] Information system cyberspace is composed of numerous nodes, each node is an IT asset (or information asset) connected to the network, and information assets include host operating systems, network devices, security devices, databases, middleware, and application components. Information assets are the most basic and important carrier in information security management. With the continuous growth of the internal business of the enterprise and the rapid development of business informatization, various business support platforms and management systems are becoming more and more complex. As the resources become richer and richer, the asset management work brought to administrators becomes more and more difficult. Over time, a large number of unowned assets and zombie assets have been gene...

AI Technical Summary

Problems solved by technology

Over time, a large number of unowned assets and zombie assets have been generated. These assets have not been maintained for a long time, resulting in more known vulnerabilities and configuration violations.

What's more serious is that these assets are difficult to be included in the daily maintenance scope of administrators, which brings great hidden dangers to enterprise security and becomes the weakness of enterprise information security.

[0003] Taking Guangdong Power Grid as an example, common power information equipment, such as servers, switches, routers, power communication terminals, intelligent power transformation equipment, etc., once a security problem occurs, it will affect the normal acquisition of power information and the normal supply of power services. People's daily production and life bring a lot of inconvenience, but also cause great economic losses.

Images