Relationship graph display method and device

Abstract

The embodiment of the invention provides a relational graph display method and device, and the method comprises the steps: connecting an asset management system, and obtaining the asset data of an enterprise organization in a cloud service platform through the asset management system; obtaining an asset identifier in the asset data and a communication relationship corresponding to the asset identifier; importing the asset identifier and the communication relationship into a preset graph database; in a graph database, creating a node according to the asset identifier, and creating a relationship edge according to a communication relationship corresponding to the asset identifier; and based on the nodes and the relation edges, constructing a relation graph corresponding to the asset data, obtaining a display page of the enterprise organization, and displaying the relation graph on the display page. The embodiment of the invention is beneficial to improving the construction efficiency of the relation graph.

Description

Technical Field

[0001] The embodiments of the present application belong to the field of network security, and in particular, relate to a relationship diagram display method and device. Background Art

[0002] As enterprises become more information-based, asset data is growing explosively, a change that has directly exacerbated challenges in the field of network security. As asset data continues to increase, traditional data management methods are no longer adequate, making it difficult to detect and respond to security vulnerabilities and risks in a timely manner.

[0003] Therefore, the demand for effectively displaying these asset data in the field of network security has become increasingly urgent. Therefore, how to construct a relationship graph corresponding to the asset data and how to display the relationship graph corresponding to the asset data are both urgent problems to be solved. Summary of the invention

[0004] The embodiments of the present application provide a method and device for displaying a relationship graph to solve the above-mentioned technical problems of how to construct a relationship graph corresponding to the asset data and how to display the relationship graph corresponding to the asset data.

[0005] In a first aspect, an embodiment of the present application provides a relationship diagram display method, which is applied to an electronic device, and the relationship diagram display method includes:

[0006] Connect to the asset management system and obtain the asset data of the enterprise organization on the cloud service platform through the asset management system;

[0007] Obtaining the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier;

[0008] Importing the asset identification and the connectivity relationship into a preset graph database;

[0009] In the graph database, a node is created according to the asset identifier, and a relationship edge is created according to the connectivity relationship corresponding to the asset identifier;

[0010] Based on the nodes and the relationship edges, a relationship graph corresponding to the asset data is constructed, a display page of the enterprise organization is obtained, and the relationship graph is displayed on the display page.

[0011] In a possible implementation of the first aspect, connecting to an asset management system and obtaining asset data of an enterprise organization on a cloud service platform through the asset management system includes:

[0012] Connecting to an asset management system and sending a data acquisition instruction of an enterprise organization to the asset management system;

[0013] Receive the asset data of the enterprise organization on the cloud service platform returned by the asset management system according to the data acquisition instruction.

[0014] In an embodiment of the present application, by receiving the asset data of the enterprise organization on the cloud service platform returned by the asset management system according to the data acquisition instruction, a risk assessment of the asset data of the cloud service platform can be performed.

[0015] In a possible implementation manner of the first aspect, acquiring the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier includes:

[0016] Selecting an identifier of a target asset as the asset identifier, wherein the target asset includes one or a combination of a server, a router, a switch, a software system, a database, and an application;

[0017] Acquire network traffic, and acquire connectivity relationships of the asset identifiers from the network traffic.

[0018] In an embodiment of the present application, the connectivity relationship of the asset identifier is obtained from the network traffic, and based on the analysis of the connectivity relationship, firewall rules can be set to reduce potential security threats.

[0019] In a possible implementation manner of the first aspect, importing the asset identifier and the connectivity relationship into a preset graph database includes:

[0020] Connect to the graph database through the port in the connection information, and obtain an import tool for the graph database;

[0021] Use the import tool to import the asset identification and the connectivity relationship into the graph database.

[0022] In the embodiment of the present application, through the asset identification and the connectivity relationship, an association between the asset identification and the connectivity relationship can be established in the graph database.

[0023] In a possible implementation manner of the first aspect, in the graph database, creating a node according to the asset identifier, and creating a relationship edge according to a connectivity relationship corresponding to the asset identifier, includes:

[0024] In the graph database, determining whether the asset identifier is a duplicate identifier;

[0025] When the asset identifier is not the duplicate identifier, a node is created according to the asset identifier, and a relationship edge is created according to the connectivity relationship corresponding to the asset identifier.

[0026] In an embodiment of the present application, when the asset identifier is not the duplicate identifier, a node is created according to the asset identifier, and a relationship edge is created according to the connectivity relationship corresponding to the asset identifier, so that data redundancy can be avoided.

[0027] In a possible implementation manner of the first aspect, constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, acquiring a display page of the enterprise organization, and displaying the relationship graph on the display page includes:

[0028] Based on the nodes and the relationship edges, construct the relationship graph corresponding to the asset data;

[0029] Marking the risk level of the asset identification in the relationship diagram;

[0030] A display page of the enterprise organization is obtained, and the relationship diagram marked with the risk level is displayed on the display page.

[0031] In an embodiment of the present application, a display page of the enterprise organization is obtained, and on the display page, the relationship diagram marked with the risk level is displayed, which helps users identify potential security holes, weaknesses and vulnerable areas of asset data.

[0032] In a possible implementation manner of the first aspect, after constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, acquiring a display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes:

[0033] Obtaining an operation instruction of the relationship diagram;

[0034] When the operation instruction is a zoom-in instruction, zooming in the relationship diagram;

[0035] When the operation instruction is a zoom-out instruction, the relationship diagram is zoomed out.

[0036] In the embodiment of the present application, through the zoom-in instruction and the zoom-out instruction, the user can adjust the size of the relationship diagram according to the needs, which can meet the user's personalized needs.

[0037] In a possible implementation manner of the first aspect, after constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, acquiring a display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes:

[0038] Obtain a file of the relationship graph, and save the file.

[0039] In the embodiment of the present application, the file is saved, and the relationship diagram is loaded through the file without rebuilding, which is helpful to reduce the building time.

[0040] In a possible implementation manner of the first aspect, after constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, acquiring a display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes:

[0041] A push instruction is obtained, the push instruction is executed, and the file of the relationship diagram is pushed to the monitoring system corresponding to the enterprise organization.

[0042] In an embodiment of the present application, the file of the relationship graph is pushed to the monitoring system corresponding to the enterprise organization, and the monitoring system can identify potential security holes, weaknesses and vulnerable areas of the asset data through the relationship graph.

[0043] In a second aspect, an embodiment of the present application provides a relationship diagram display device, including:

[0044] A first acquisition module is used to connect to the asset management system and obtain the asset data of the enterprise organization on the cloud service platform through the asset management system;

[0045] A second acquisition module is used to acquire the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier;

[0046] An import module, used to import the asset identification and the connectivity relationship into a preset graph database;

[0047] A creation module, used to create a node in the graph database according to the asset identifier, and create a relationship edge according to the connectivity relationship corresponding to the asset identifier;

[0048] The display module is used to construct a relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtain a display page of the enterprise organization, and display the relationship graph on the display page.

[0049] The beneficial effects of the embodiments of the present application lie in two aspects. On the one hand, based on the nodes and the relationship edges, a relationship graph corresponding to the asset data is constructed, which solves the problem of how to construct the relationship graph corresponding to the asset data. Since manual construction is not required, the construction time of the relationship graph is reduced, which is beneficial to improving the construction efficiency of the relationship graph. On the other hand, a display page of the enterprise organization is obtained, and the relationship graph is displayed on the display page, which solves the problem of how to display the relationship graph corresponding to the asset data. Since the relationship graph can intuitively present the asset data, it is beneficial to improve the display efficiency of the asset data in the relationship graph. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. Some specific embodiments of the present application will be described in detail in an illustrative and non-restrictive manner with reference to the drawings. The same reference numerals in the drawings indicate the same or similar components or parts. It should be understood by those skilled in the art that these drawings are not necessarily drawn to scale. In the drawings:

[0051] Figure 1 is a flow chart of a method for displaying a relationship diagram provided in an embodiment of the present application;

[0052] Figure 2 A schematic block diagram of a relationship diagram display device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0053] In order to enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only embodiments of a part of the present application, not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work should fall within the scope of protection of the present application.

[0054] The generation method provided in the embodiments of the present application can be applied to electronic devices such as servers, mobile phones, tablet computers, wearable devices, vehicle-mounted devices, augmented reality (AR) / virtual reality (VR) devices, laptop computers, ultra-mobile personal computers (UMPCs), netbooks, personal digital assistants (PDAs), etc. The embodiments of the present application do not impose any restrictions on the specific types of electronic devices.

[0055] Figure 1 is a flow chart of a method for displaying a relationship diagram provided in an embodiment of the present application. Figure 1 As shown, the generation method provided in the embodiment of the present application includes the following steps, which are described in detail as follows:

[0056] S101, connecting to an asset management system, and obtaining asset data of an enterprise organization on a cloud service platform through the asset management system;

[0057] Among them, corporate organizations include sole proprietorships, partnerships, and corporate enterprises.

[0058] Wherein, the connecting to the asset management system and obtaining the asset data of the enterprise organization on the cloud service platform through the asset management system includes:

[0059] Connecting to an asset management system and sending a data acquisition instruction of an enterprise organization to the asset management system;

[0060] Receive the asset data on the cloud service platform returned by the asset management system according to the data acquisition instruction.

[0061] Exemplarily, connecting to an asset management system and sending a data acquisition instruction of an enterprise organization to the asset management system includes:

[0062] Read the preset acquisition time and determine whether the current time is the acquisition time;

[0063] If the current time is the acquisition time, the asset management system is connected, and a data acquisition instruction of the enterprise organization is sent to the asset management system. The preset network includes one of the 3G network, 4G network, 5G network, and WIFI network, or a combination thereof. In this way, the data acquisition instruction of the enterprise organization can be sent to the asset management system regularly, and the updated asset data can be obtained in time.

[0064] In an embodiment of the present application, by receiving the asset data of the enterprise organization on the cloud service platform returned by the asset management system according to the data acquisition instruction, a risk assessment of the asset data of the cloud service platform can be performed.

[0065] S102, obtaining the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier;

[0066] Wherein, the acquiring of the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier includes:

[0067] Selecting an identifier of a target asset as the asset identifier, wherein the target asset includes one or a combination of a server, a router, a switch, a software system, a database, and an application;

[0068] Acquire network traffic, and acquire connectivity relationships of the asset identifiers from the network traffic.

[0069] Wherein, obtaining network traffic, and obtaining the connectivity relationship of the asset identifier from the network traffic, includes:

[0070] Use network traffic analysis tools to set up traffic capture points on core network devices. Capture network traffic through the traffic capture points, and determine the connectivity of target assets based on the source IP and destination IP addresses of the data packets in the captured network traffic.

[0071] For the sake of illustration, an example is given below:

[0072] Use network traffic analysis tools to set up traffic capture points on core network devices to capture network traffic. Parse and analyze the captured network traffic to identify data packets involving servers, routers, switches, software systems, databases, and applications. Based on the source and destination IP addresses of the data packets, the communication paths and connectivity relationships of servers, routers, switches, software systems, databases, and applications can be determined.

[0073] Among them, connectivity relationships include network relationships, authority relationships, login relationships, and ownership relationships.

[0074] Among them, network relationships refer to the connection and interaction between servers, routers, and switches in the network. These connections and interactions constitute the structure of the network and determine the path and method of information flow in the network.

[0075] Network relationships refer to the connections, interactions, and dependencies between entities in the network. These relationships constitute the overall architecture of the network, affecting the flow of information, access control, and the implementation of security policies.

[0076] For the sake of illustration, an example is given below:

[0077] An enterprise network includes multiple departments and multiple computers. In this enterprise network, the network relationship can be reflected in the following aspects:

[0078] Connection relationship between devices:

[0079] Computers within each department are interconnected through switches and routers to form a local area network;

[0080] Computers between departments are securely isolated and can access each other through enterprise-level firewalls and VPN devices.

[0081] Among them, permission relationship refers to the access rights and control capabilities of different users or systems to network resources in a network environment. The design and implementation of permission relationship is crucial to ensure network security. Network resources include files, databases, network devices, or a combination of them.

[0082] Among them, the permission relationship can be achieved through access control lists and role-based access control.

[0083] In the permission relationship, users or systems are assigned specific roles and permissions to limit their access to and operations on network resources.

[0084] For the sake of illustration, an example is given below:

[0085] On a company's server, employee accounts in different departments have different access rights to server files. For example, employee accounts in the human resources department can access employee account archive files, while employee accounts in the sales department cannot. This permission relationship is implemented through role-based access control, where each employee account is assigned one or more roles, and each role corresponds to a certain set of permissions.

[0086] The login relationship refers to the authentication and authorization process established between the user device and the system. When the user device attempts to access the system, it needs to establish a login relationship through identity authentication to obtain the corresponding access rights.

[0087] For the sake of illustration, an example is given below:

[0088] The user device attempts to log in to the company's internal management system. He enters the correct user name and password. After the system passes the verification, a login relationship is established between the user device and the company's internal management system. At this point, the user device can access the resources and data in the system that it is authorized to access.

[0089] Among them, attribution refers to the unclear ownership of network resources, which makes it easier for attackers to access and exploit these resources.

[0090] For the sake of illustration, an example is given below:

[0091] For example, the ownership of database backups is unclear. Attackers can obtain sensitive data of enterprises, such as customer information and financial statements, through database backups, thus causing significant losses to the enterprises.

[0092] For example, the ownership of the application is unclear. The application has unauthorized API interfaces, and attackers can query the sensitive data of the enterprise through the API interfaces.

[0093] Through attribution, role-based access control can be implemented to ensure that only authorized users can access specific network resources.

[0094] In an embodiment of the present application, the connectivity relationship of the asset identifier is obtained from the network traffic, and based on the analysis of the connectivity relationship, firewall rules can be set to reduce potential security threats.

[0095] S103, importing the asset identification and the connectivity relationship into a preset graph database;

[0096] The full name of graph database is Graph Database, or GDB for short. Graph database is a non-relational database that uses graph structure for semantic query and is a database specifically used to store graph data.

[0097] In a possible implementation manner of the first aspect, importing the asset identifier and the connectivity relationship into a preset graph database includes:

[0098] Connect to the graph database through the port in the connection information, and obtain an import tool for the graph database;

[0099] Use the import tool to import the asset identification and the connectivity relationship into the graph database.

[0100] In the embodiment of the present application, through the asset identification and the connectivity relationship, an association between the asset identification and the connectivity relationship can be established in the graph database.

[0101] S104, in the graph database, creating a node according to the asset identifier, and creating a relationship edge according to the connectivity relationship corresponding to the asset identifier;

[0102] In a possible implementation manner of the first aspect, in the graph database, creating a node according to the asset identifier, and creating a relationship edge according to a connectivity relationship corresponding to the asset identifier, includes:

[0103] In the graph database, determining whether the asset identifier is a duplicate identifier;

[0104] When the asset identifier is not the duplicate identifier, a node is created according to the asset identifier, and a relationship edge is created according to the connectivity relationship corresponding to the asset identifier.

[0105] In an embodiment of the present application, when the asset identifier is not the duplicate identifier, a node is created according to the asset identifier, and a relationship edge is created according to the connectivity relationship corresponding to the asset identifier, so that data redundancy can be avoided.

[0106] S105, constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtaining a display page of the enterprise organization, and displaying the relationship graph on the display page.

[0107] Among them, in the field of network security, relationship edges are crucial to understanding and evaluating the security of the asset data.

[0108] For the sake of illustration, an example is given below:

[0109] The asset data of an enterprise organization includes multiple user accounts A, user accounts B, servers C, and server D.

[0110] User account A: Network administrator, with advanced access rights.

[0111] User account B: An employee of the finance department who has access rights to the finance system.

[0112] Server C: The file server in the enterprise intranet, storing sensitive files.

[0113] Server D: Financial system server, processing financial data.

[0114] The relationship edges of the enterprise organization are detailed as follows:

[0115] There is a connection between the computer where user account A is located and server C. The port number is 22, which is used for remote management.

[0116] There is a connection between the computer of user account B and server D, with port number 443, which is used to access the financial system.

[0117] The access rights of the enterprise organization are detailed as follows:

[0118] User account A has full access to server C, including read, write, and execute permissions.

[0119] User account B has read-only access to server D and can only view financial data but cannot modify it.

[0120] The data flow of an enterprise organization is detailed as follows:

[0121] Every night, the backup script on Server C encrypts sensitive files and transfers them to an external backup server via an FTP connection for off-site backup.

[0122] The FTP connection includes a control connection and a data connection based on FTP.

[0123] Among them, FTP (File Transfer Protocol).

[0124] Among them, FTP is a file transfer protocol widely used on the Internet. It allows users to connect to the FTP server through FTP client software to upload and download files.

[0125] At the end of each month, user account B will export financial data from server D to the local computer via the SFTP protocol for monthly financial analysis.

[0126] Among them, SFTP (SSH File Transfer Protocol).

[0127] SFTP is a file transfer protocol based on the SSH (Secure Shell) protocol, which provides higher security than FTP.

[0128] In this example, the relationship edges not only represent network connections, but also contain specific details of access rights and data flow. By analyzing these relationship edges, the security of the network can be evaluated:

[0129] User account A, as a network administrator, has extensive access rights, so special attention needs to be paid to the security of its account to prevent unauthorized access.

[0130] User account B has limited access to the financial system, which helps reduce the risk of data leakage, but data encryption and integrity must still be ensured during transmission.

[0131] FTP connections may face the risk of man-in-the-middle attacks during data flow, so strong encryption mechanisms should be used for FTP connections. When exporting financial data from Server D to the local computer, an authentication mechanism should be used to enhance the security of data transmission.

[0132] In a possible implementation manner of the first aspect, constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, acquiring a display page of the enterprise organization, and displaying the relationship graph on the display page includes:

[0133] Based on the nodes and the relationship edges, construct the relationship graph corresponding to the asset data;

[0134] Marking the risk level of the asset identification in the relationship diagram;

[0135] A display page of the enterprise organization is obtained, and the relationship diagram marked with the risk level is displayed on the display page.

[0136] Exemplarily, obtaining a display page of the enterprise organization, and displaying the relationship diagram marked with the risk level on the display page, includes:

[0137] Obtain vulnerability information of the asset identifier and obtain a display page of the enterprise organization;

[0138] The relationship diagram marked with the risk level is displayed in a first display area of ​​the display page, and the vulnerability information is displayed in a second display area of ​​the display page, wherein the first display area and the second display area are different display areas.

[0139] In an embodiment of the present application, a display page of the enterprise organization is obtained, and on the display page, the relationship diagram marked with the risk level is displayed, which helps users identify potential security holes, weaknesses and vulnerable areas of asset data.

[0140] Wherein, after constructing the relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtaining the display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes:

[0141] Obtaining an operation instruction of the relationship diagram;

[0142] When the operation instruction is a zoom-in instruction, zooming in the relationship diagram;

[0143] When the operation instruction is a zoom-out instruction, the relationship diagram is zoomed out.

[0144] In the embodiment of the present application, through the zoom-in instruction and the zoom-out instruction, the user can adjust the size of the relationship diagram according to the needs, which can meet the user's personalized needs.

[0145] Wherein, after constructing the relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtaining the display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes:

[0146] Obtain a file of the relationship graph, and save the file.

[0147] In the embodiment of the present application, the file is saved, and the relationship diagram is loaded through the file without rebuilding, which is helpful to reduce the building time.

[0148] Wherein, after constructing the relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtaining the display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes:

[0149] A push instruction is obtained, the push instruction is executed, and the file of the relationship diagram is pushed to the monitoring system corresponding to the enterprise organization.

[0150] In an embodiment of the present application, the file of the relationship graph is pushed to the monitoring system corresponding to the enterprise organization, and the monitoring system can identify potential security holes, weaknesses and vulnerable areas of the asset data through the relationship graph.

[0151] The beneficial effects of the embodiments of the present application lie in two aspects. On the one hand, based on the nodes and the relationship edges, a relationship graph corresponding to the asset data is constructed, which solves the problem of how to construct the relationship graph corresponding to the asset data. Since manual construction is not required, the construction time of the relationship graph is reduced, which is beneficial to improving the construction efficiency of the relationship graph. On the other hand, a display page of the enterprise organization is obtained, and the relationship graph is displayed on the display page, which solves the problem of how to display the relationship graph corresponding to the asset data. Since the relationship graph can intuitively present the asset data, it is beneficial to improve the display efficiency of the asset data in the relationship graph.

[0152] For the relationship diagram display method described in the above embodiment, please refer to Figure 2 , Figure 2 A schematic block diagram of a relationship diagram display device provided in an embodiment of the present application, Figure 2 The generating device 200 shown in the figure can be applied to the above-mentioned electronic device. Figure 2 The generating device 200 shown is described in detail. The generating device 200 may include a first obtaining module 201, a second obtaining module 202, an importing module 203, a creating module 204, and a displaying module 205.

[0153] The first acquisition module 201 is used to connect to the asset management system and obtain the asset data of the enterprise organization on the cloud service platform through the asset management system;

[0154] A second acquisition module 202 is used to acquire the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier;

[0155] An import module 203, used to import the asset identification and the connectivity relationship into a preset graph database;

[0156] A creation module 204, configured to create a node in the graph database according to the asset identifier, and create a relationship edge according to the connectivity relationship corresponding to the asset identifier;

[0157] The display module 205 is used to construct a relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtain a display page of the enterprise organization, and display the relationship graph on the display page.

[0158] It should be noted that the various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0159] The beneficial effects of the embodiments of the present application lie in two aspects. On the one hand, based on the nodes and the relationship edges, a relationship graph corresponding to the asset data is constructed, which solves the problem of how to construct the relationship graph corresponding to the asset data. Since manual construction is not required, the construction time of the relationship graph is reduced, which is beneficial to improving the construction efficiency of the relationship graph. On the other hand, a display page of the enterprise organization is obtained, and the relationship graph is displayed on the display page, which solves the problem of how to display the relationship graph corresponding to the asset data. Since the relationship graph can intuitively present the asset data, it is beneficial to improve the display efficiency of the asset data in the relationship graph.

[0160] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for displaying a relationship diagram, characterized in that: The relationship diagram display method comprises: Connect to the asset management system and obtain the asset data of the enterprise organization on the cloud service platform through the asset management system; Obtaining the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier; Importing the asset identification and the connectivity relationship into a preset graph database; In the graph database, a node is created according to the asset identifier, and a relationship edge is created according to the connectivity relationship corresponding to the asset identifier; Based on the nodes and the relationship edges, a relationship graph corresponding to the asset data is constructed, a display page of the enterprise organization is obtained, and the relationship graph is displayed on the display page.

2. The relationship diagram display method according to claim 1, characterized in that: The connecting asset management system, and obtaining the asset data of the enterprise organization on the cloud service platform through the asset management system, includes: Connecting to an asset management system and sending a data acquisition instruction of an enterprise organization to the asset management system; Receive the asset data of the enterprise organization on the cloud service platform returned by the asset management system according to the data acquisition instruction.

3. The relationship diagram display method according to claim 1, characterized in that: The acquiring the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier includes: Selecting an identifier of a target asset as the asset identifier, wherein the target asset includes one or a combination of a server, a router, a switch, a software system, a database, and an application; Acquire network traffic, and acquire connectivity relationships of the asset identifiers from the network traffic.

4. The relationship diagram display method according to claim 1, characterized in that: The step of importing the asset identifier and the connectivity relationship into a preset graph database includes: Connect to the graph database through the port in the connection information, and obtain an import tool for the graph database; Use the import tool to import the asset identification and the connectivity relationship into the graph database.

5. The relationship diagram display method according to claim 1, characterized in that: In the graph database, creating a node according to the asset identifier, and creating a relationship edge according to the connectivity relationship corresponding to the asset identifier, includes: In the graph database, determining whether the asset identifier is a duplicate identifier; When the asset identifier is not the duplicate identifier, a node is created according to the asset identifier, and a relationship edge is created according to the connectivity relationship corresponding to the asset identifier.

6. The relationship diagram display method according to claim 1, characterized in that: The step of constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtaining a display page of the enterprise organization, and displaying the relationship graph on the display page includes: Based on the nodes and the relationship edges, construct the relationship graph corresponding to the asset data; Marking the risk level of the asset identification in the relationship diagram; A display page of the enterprise organization is obtained, and the relationship diagram marked with the risk level is displayed on the display page.

7. The relationship diagram display method according to any one of claims 1 to 5, characterized in that: After constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtaining a display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes: Obtaining an operation instruction of the relationship diagram; When the operation instruction is a zoom-in instruction, zooming in the relationship diagram; When the operation instruction is a zoom-out instruction, the relationship diagram is zoomed out.

8. The relationship diagram display method according to any one of claims 1 to 5, characterized in that: After constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtaining a display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes: Obtain a file of the relationship graph, and save the file.

9. The relationship diagram display method according to any one of claims 1 to 5, characterized in that: After constructing a relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtaining a display page of the enterprise organization, and displaying the relationship graph on the display page, the relationship graph display method includes: A push instruction is obtained, the push instruction is executed, and the file of the relationship diagram is pushed to the monitoring system corresponding to the enterprise organization.

10. A relationship diagram display device, characterized in that: include: A first acquisition module is used to connect to the asset management system and obtain the asset data of the enterprise organization on the cloud service platform through the asset management system; A second acquisition module is used to acquire the asset identifier in the asset data and the connectivity relationship corresponding to the asset identifier; An import module, used to import the asset identification and the connectivity relationship into a preset graph database; A creation module, used to create a node in the graph database according to the asset identifier, and create a relationship edge according to the connectivity relationship corresponding to the asset identifier; A display module is used to construct a relationship graph corresponding to the asset data based on the nodes and the relationship edges, obtain a display page of the enterprise organization, and display the relationship graph on the display page.

Images