A method for displaying it asset risk situational awareness

Abstract

The present invention provides an IT asset risk situational awareness display method, comprising the following steps: S1: building an asset model; S2: exporting an obj format file to generate a drc file; S3: publishing the drc file generated in step S2 as a static file, Set the rendering conditions, select the loader, and transfer the address published by the static file to the loader for preliminary rendering; S4: Input IT asset protection information and bind asset information; S5: The backend starts monitoring and recording attack data; S6: Backend The recorded attack data is transmitted to the front-end page in real time. After receiving the attack data, the front-end page queries the monomer model where the target node is located according to the bound information, and then draws the attacked unit node, and then draws the attack route. Real-time update rendering, real-time and vivid display of hidden attack behaviors, can fully vividly visualize abstract virtual network attacks, and intuitively display the status quo of asset risks.

Description

technical field [0001] The invention relates to the field of network attack and defense asset risk analysis visualization, in particular to an IT asset risk situation awareness display method. Background technique [0002] Security awareness is the core of the security defense system. In the face of hidden attacks and penetration tests by hackers, whether it can be identified and discovered in the first place is the fundamental measure of the quality of the security system. Therefore, visualization technology has been used in a certain range in the security field. But at present, the visual display of network attacks is concentrated on the display of attacks at the national, provincial and municipal levels, and the use of internal IT asset risk display is seldom used. After a network attack occurs, only rely on security operation and maintenance personnel to use technical instructions to check layer by layer, and gradually locate the attacked assets. Such a method is not o...

AI Technical Summary

Problems solved by technology

Therefore, in the IT asset management system of this patent document, the maintenance personnel only need to configure the IP address set of the asset group, and the system can automatically calculate and display the association between the asset groups in a graphical form, which simplifies the creation of asset groups. process, without the need to manually maintain the organizational structure; that is, the above-mentioned patent documents only show assets, but cannot show hidden network attacks

Images