Network attack surface tracking method, server and system

Abstract

The invention discloses a method, a server and a system for tracking a network attack surface. Firstly, enabling each network node to check a data segment by itself; extracting available attack vectors; collecting data segment copies on each network node; combining a plurality of abnormal data segments with historical big data, analyzing whether the data segments are abnormal or not and whether logic association exists among the abnormal data segments or not, so that abnormal points and path points are determined and marked, potential attack trajectories and security vulnerabilities of networknodes are obtained, and the purpose of tracking attack surfaces in a large number of network nodes is achieved.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a method, server and system for network attack surface tracking. Background technique [0002] The current network communication is facing more and more hidden security issues. Many attacks come from hidden and fragmented forms. The vulnerability points and attack links of a single node will constitute multiple attack surfaces, and the existing methods of preventing network attacks will fail. . Especially the current network usually has a large number of network nodes, and the attacker can disperse the fragments on various network nodes, so as to avoid being discovered. There is an urgent need for a network monitoring attack method that can check the vulnerabilities of nodes and track fragment links. Contents of the invention [0003] The purpose of the present invention is to provide a method, device and system for network attack surface tracking. Firstly,...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to provide a method, device and system for network attack surface tracking. Firstly, each network node checks the data fragments by itself, extracts exploitable attack vectors, and then collects copies of the data fragments on each network node, and Merge with historical big data, analyze whether there is any abnormality in the data fragments, and whether there is a logical connection between multiple abnormal data fragments, so as to determine and mark the abnormal points and way points, obtain potential attack tracks and security vulnerabilities of network nodes, and solve current problems. There is a problem that the attack surface cannot be traced in the technology

Images