A method and device for identifying target information assets

Abstract

Embodiments of the present invention provide a method and device for identifying a target information asset. The method includes: acquiring a traffic log of the information asset to be identified; extracting a source IP, a destination IP and the source IP from the traffic log to access the The number of statistics of the destination IP, and a directed weighted graph is generated; the preset recognition model is optimized according to the directed weighted graph, and the output result of the optimized preset identification model is used as the score of each node; the score represents The frequency with which the node visits other nodes and is visited by other nodes; obtains the target node corresponding to the score greater than the preset threshold, obtains the associated target node associated with all target nodes according to the directed weighted graph, and uses All target nodes and the information assets to be identified corresponding to the associated target nodes are determined as target information assets. The apparatus performs the above-described method. The method and device provided by the embodiments of the present invention can accurately and efficiently identify target information assets.

Description

technical field [0001] The present invention relates to the technical field of information asset processing, and in particular, to a method and device for identifying target information assets. Background technique [0002] In recent years, with the rapid development of computer technology, various information assets in enterprises, such as network equipment and other equipment that frequently communicate with other equipment through the network, have become important assets in enterprises. As the business of enterprises and organizations continues to grow, it brings difficulties to the management of information assets, and it is easy to generate a large number of unowned information assets and zombie information assets, which brings great hidden dangers to the security of enterprises and organizations. In this context, it is particularly important to identify the target information assets in the enterprise in time (that is, to access other information assets through the net...

AI Technical Summary

Problems solved by technology

However, the above-mentioned methods all have certain defects, for example: 1) Although the manual input method is accurate and comprehensive, it is time-consuming and labor-intensive for the enterprise; 2) The statistical method introduces large errors and low accuracy; 3 ) Supervised machine learning methods need to be driven by a large amount of labeled data, and the cost is often too high

Images