Network asset information collection and monitoring system

Abstract

The invention provides a network asset information collection and monitoring system, and belongs to the field of network security. The method comprises the following steps: performing sub-domain nameblasting on a main domain name to obtain a sub-domain name set; further, obtaining all network asset information corresponding to all IP addresses through ipwhois and port scanning; and classifying all IP addresses and all domain names, comparing all network information acquired by the IP addresses with open services with all network asset information acquired by the IP address of the master station, taking multiple values, classifying and inputting the multiple values into a useful network asset information list of the to-be-checked enterprise, and completely inputting other types of classifications. Middleware scanning is performed on a useful network asset information list, a vulnerability list corresponding to middleware information is pulled, and a vulnerability alarm is given. According to the invention, the classified network asset information in units of enterprises can be obtained through simple main domain name input, the network assets are subjected to security monitoring, the steps are simplified, and the method is simple and easy to implement.

Description

technical field [0001] The invention relates to the field of network security, in particular to a system for collecting and monitoring network asset information. Background technique [0002] The Internet has penetrated into all walks of life in today's society, affecting every part of people's lives, and has become an increasingly inseparable technology for people's lives. However, with the rapid development of the Internet, the network has become a problem that people are more and more concerned about, and the management of network assets is an indispensable means of network security. [0003] At present, in the black box test of enterprise network security testing, the staff often only collect information once: that is, after collecting the information, it will be recorded in text or other notepad software, and will not be updated dynamically. It will not be detailed to a specific version. At the same time, in the black box test, port information collection, website dir...

AI Technical Summary

Problems solved by technology

[0006] 1. Usually only port scanning is performed on all IP addresses in the C segment of the IP address of the master station, which is not targeted and depends entirely on luck

[0007] 2. The network asset information of different service providers will be obtained, and the information is inaccurate

[0008] 3. If the sub-domain name blasting method is not used, the obtained IP address is not comprehensive, and the collected network asset information is not comprehensive

[0009] 4. It is not collected on an enterprise basis, and the information obtained is scattered

[0010] 5. Only collect network asset information for open services, and do not classify

Images