Internet asset exposure information checking method

Abstract

The invention discloses an internet asset exposure information checking method. The method comprises the following steps: S1, confirming known clue information; s2, obtaining a domain name and an Ip list of an enterprise through an association algorithm; s3, detecting the domain name and the IP obtained in the S2 by using an asset detection tool; and S4, analyzing ports, protocols and component applications of asset opening. The enterprise domain name and Ip list are obtained through association algorithms such as certificates, sub-domain name blasting, flow analysis, ICP information, domain name registration information, enterprise names, app, WeChat applets and the like, then the domain names and the IPs are detected by using an asset detection tool, open ports, protocols and component applications of assets are analyzed, comprehensive exposure surface investigation is carried out on enterprise internet assets. The method can converge the attack surface, reduce the attacked risk, improve the internal management of an enterprise, reduce the notification of a supervised unit, and lay a foundation for the subsequent safety risk assessment and monitoring.

Description

technical field [0001] The invention belongs to the technical field of asset security, and in particular relates to a method for checking Internet asset exposure information. Background technique [0002] As the national Internet financial monitoring department (hereinafter referred to as the national monitoring department) accesses more and more Internet finance (Internet financial peer-to-peer lending platforms) companies, problems with the integrity and authenticity of transaction data have emerged. There are still various problems in this kind of Internet asset exposure information screening method. [0003] For example, the network asset anomaly detection method, system, medium and equipment disclosed by the authorized announcement number CN111339297A, although it can improve the efficiency and accuracy of private network asset anomaly detection, and can be applied to a variety of general detection methods for abnormal threat scenarios , but there are still some proble...

AI Technical Summary

Problems solved by technology

[0003] For example, the network asset anomaly detection method, system, medium and equipment disclosed by the authorized announcement number CN111339297A, although it can improve the efficiency and accuracy of private network asset anomaly detection, and can be applied to a variety of general detection methods for abnormal threat scenarios , but there are still some problems in the existing Internet asset exposure information screening methods: Internet assets are numerous, large in scale, limited in personnel, and limited in technical means, resulting in incomplete accounts, inaccurate, poor timeliness, weak management and control, and no way to start when notified. We have been looking at the problem from the defensive side, so we propose a method for screening Internet asset exposure information

Images