Distributed network asset detection method

Abstract

The invention discloses a distributed network asset detection method. The method comprises the following steps: 1) a plurality of detection nodes with asset detection functions are deployed; 2) according to IP position information, an IP address is divided into a plurality of detection target IP lists; 3) a detection node selection strategy model is built, and reasonable detection nodes are selected for the target IP lists; 4) active host survivability detection is carried out on the target IP lists at the detection nodes; 5) open port detection is carried out on a survival target IP; and 6) adetection message is sent to an open port of the survival target IP, and network asset information is obtained through comparison with a fingerprint database. According to the method, the detection nodes of different countries and regions are constructed, a selection strategy is optimized by adopting the detection nodes, and the detection nodes most suitable for the target IP lists are selected,so that the detection efficiency of network assets and the accuracy of a detection result are remarkably improved.

Description

technical field [0001] The invention relates to the technical field of network management, in particular to a method for detecting distributed network assets. Background technique [0002] With the continuous development of the network and the sharp increase in user demand for network use, the scale of the network is expanding and becoming more and more complex. More and more terminal devices are added to the network space, such as smart mobile phones, printers, and network cameras. , digital media equipment and other equipment. Through cyberspace asset detection, potential security risks can be discovered in time to avoid being attacked by criminals. Therefore, equipment asset identification is of great significance to network security assessment and threat warning. Cyberspace has become an important place for the national economy and social life, network technology has become an important indicator for examining and measuring national core technologies, and network secur...

AI Technical Summary

Problems solved by technology

[0004] (1) In the existing cyberspace asset detection method, multiple single detection nodes in the same region are used for distributed detection construction, and no detection node selection strategy is adopted, and the optimal selection strategy for different regions and the attributes of the detection nodes is not considered, resulting in detection Low efficiency and poor detection effect;

[0005] (2) The existing cyberspace asset detection methods can only identify basic information such as the manufacturer and model of cyberspace assets through the protocol, and cannot be combined with other methods to judge, and the accuracy of the detection results has not been verified. Network equipment banner information Inaccurate, not reliable

Images