External attack surface visual analysis method and system based on graph technology

Abstract

The invention discloses an external attack surface visual analysis method and system based on a graph technology. The method comprises the following steps: obtaining asset data of internal and external networks and an association mapping relationship corresponding to each asset; analyzing and processing the asset data and the association mapping relation to obtain node information and side information, so as to construct a graph model, and storing the graph model in a graph database; querying a graph database by utilizing predefined high-risk data and combining with a plurality of graph relationship query modes to query corresponding risk data; displaying the risk data to safety personnel in real time by adopting a G6 force-oriented layout through a graph visualization technology so as to realize visual analysis; the method has the beneficial effects that a graph technology is utilized to help a user to carry out rapid carding, so that an external attack surface is more macroscopically presented, in-depth interaction analysis is facilitated, and the understanding, analysis and research and judgment of security personnel on multi-dimensional aggregated information are accelerated, so that the defects of more data, non-intuition and difficulty in analysis of two-dimensional matrixes such as tables and the like are overcome.

Description

technical field [0001] The invention relates to the technical field of network information security, in particular to a method and system for visual analysis of external attack surfaces based on graph technology. Background technique [0002] As one of the important directions for the future development of network security, attack surface management has been paid more and more attention by security teams. The core content of attack surface management is to carry out risk management and control of enterprise assets from an external perspective, so as to achieve comprehensive management of attack surface and reduce the probability of enterprises being attacked in various activities. [0003] At present, there is no standard definition, unified process and analysis method for the "external attack surface". Security vendors in the industry display the organizational structure, business relationship, internal and external assets involved in the external attack surface to security...

AI Technical Summary

Problems solved by technology

This presentation and interaction method cannot well assist security personnel in business scenarios such as rapid attack exposure surface analysis and vulnerability priority determination.

In addition, the data organization and presentation methods of two-dimensional matrices such as tables are not conducive to the mining and analysis of data associations, so there are defects such as large amounts of data, unintuitive and difficult to analyze

Images