A network asset identification method and system based on encrypted traffic

Abstract

The present invention provides a network asset identification method and system based on encrypted traffic. Firstly, the information of historical network assets in the organization is obtained, and then the attributes and necessary information of the network assets are manually marked, and then the characteristics of network assets based on encrypted traffic are used. The extraction algorithm extracts the encrypted traffic fingerprint features of network assets, then calculates the feature accuracy under different sensitive values, and finally determines the sensitive values ​​of the model, feeds them back into the machine learning model, and completes the model training. When network assets need to be updated and iterated , use the existing model to survey and map the traffic data of the new structure in the organization, and form the classification and identification results of network assets according to the model results. The beneficial effects of the present invention are: the present invention generates network asset fingerprint vectors based on encrypted traffic extraction, and then classifies through machine learning algorithms to realize automatic identification of network assets, so that network operation and maintenance personnel can deeply understand the network asset structure and structure of the organization in real time. Dynamic, more convenient and efficient operation and maintenance.

Description

technical field [0001] The invention relates to the technical field of network asset operation and maintenance in an IT operation and maintenance system, in particular to a network asset identification method and system based on encrypted traffic. Background technique [0002] Network asset identification in IT operation and maintenance is to sort out all the internal hardware assets of the enterprise organization. When the scale of the unit is complicated, a large number of business system equipment, database equipment, network equipment, and security protection equipment will cause a lot of management problems, and these network assets have been left idle for a long time. It is vulnerable to network attacks or security risks. When events such as organizational internal structure adjustments and network asset update cycles come, IT operation and maintenance work is huge. Traditional networks use technologies such as network detection and fingerprint recognition for identific...

AI Technical Summary

Problems solved by technology

[0007] In view of the current IT operation and maintenance process, encrypted traffic network assets are difficult to detect and sniff, traditional fingerprint identification, network asset mapping and other methods have low accuracy and low efficiency, etc., the present invention provides a network asset identification method based on encrypted traffic with the system

Images