A network asset information collection and monitoring system

Abstract

The invention provides a network asset information collection and monitoring system, which belongs to the field of network security. The present invention obtains a set of subdomain names by blasting subdomain names of the main domain name, and further obtains all network asset information corresponding to all IP addresses through ipwhois and port scanning, classifies all IP addresses and all domain names, and obtains IP addresses with open services All network information is compared with all network asset information obtained through the IP address of the master station, and the multi-value classification is entered into the useful network asset information list of the enterprise to be checked, and all other types of classification are entered. Through the middleware scanning of the useful network asset information list, the vulnerability list corresponding to the middleware information is pulled, and there is a vulnerability alarm. The invention realizes the acquisition of classified network asset information with an enterprise as a unit by simply inputting the main domain name, and performs safety monitoring on the network asset, with simplified steps and simple and easy method.

Description

technical field [0001] The invention relates to the field of network security, in particular to a system for collecting and monitoring network asset information. Background technique [0002] The Internet has penetrated into all walks of life in today's society, affecting every part of people's lives, and has become an increasingly inseparable technology for people's lives. However, with the rapid development of the Internet, the network has become a problem that people are more and more concerned about, and the management of network assets is an indispensable means of network security. [0003] At present, in the black box test of enterprise network security testing, the staff often only collect information once: that is, after collecting the information, it will be recorded in text or other notepad software, and will not be updated dynamically. It will not be detailed to a specific version. At the same time, in the black box test, port information collection, website dir...

AI Technical Summary

Problems solved by technology

[0006] 1. Usually only port scanning is performed on all IP addresses in the C segment of the IP address of the master station, which is not targeted and depends entirely on luck

[0007] 2. The network asset information of different service providers will be obtained, and the information is inaccurate

[0008] 3. If the sub-domain name blasting method is not used, the obtained IP address is not comprehensive, and the collected network asset information is not comprehensive

[0009] 4. It is not collected on an enterprise basis, and the information obtained is scattered

[0010] 5. Only collect network asset information for open services, and do not classify

Images