Asset data management and control method and device

Abstract

The invention discloses an asset data management and control method and device, and relates to the technical field of computers. The method comprises the steps of obtaining asset data of multiple sources, and extracting at least one piece of entity information from the asset data; based on the entity information, fusion operation is executed on the multiple pieces of asset data to obtain fusion data, and the fusion operation is used for merging the asset data with the same entity information.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a method and device for managing and controlling asset data. Background Art

[0002] With the continuous development of technology, digital asset management and control platforms have gradually become an important assistant for daily management and control of enterprises. Therefore, in the process of asset management and control of enterprises, the control of asset data is particularly important.

[0003] At present, the existing asset data management process generally summarizes the attribute information corresponding to the entity and displays it when the user needs it. However, in actual applications, the existing asset data management method is just a simple summary and display of data obtained from multiple sources, that is, the entire asset data display process is just a list of a large amount of attribute information, which makes the entire asset data complex and disordered, thus affecting the accurate management of asset data. Summary of the invention

[0004] The embodiment of the present application provides an asset data management method and device, the main purpose of which is to implement an asset data management method to solve the problem that in the existing asset data management process, the asset data is complex and disordered, which in turn affects the accurate management of the asset data.

[0005] In order to solve the above technical problems, the embodiments of the present application provide the following technical solutions:

[0006] In a first aspect, the present application provides a method for managing and controlling asset data, the method comprising:

[0007] Acquire asset data from multiple sources and extract at least one entity information from the asset data;

[0008] Based on the entity information, a fusion operation is performed on the plurality of asset data to obtain fused data, wherein the fusion operation is used to merge the asset data having the same entity information.

[0009] Optionally, performing a fusion operation on the plurality of asset data based on the entity information to obtain fused data includes:

[0010] Determine the attribute information having conflicting relations among the plurality of asset data, and record it as the first attribute information;

[0011] respectively determining the credibility of each of the first attribute information;

[0012] retaining the first attribute information with the highest credibility and deleting the remaining first attribute information except the first attribute information with the highest credibility;

[0013] The attribute information without conflict relationship and the attribute information with the highest credibility are determined as fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

[0014] Optionally, after respectively determining the credibility of each piece of the first attribute information, the method further includes:

[0015] When it is determined that the number of the first attribute information with the highest credibility exceeds one, each of the first attribute information and the corresponding data source are sent to the audit port, and a first audit result after the audit by the audit port is obtained, wherein the first audit result includes second attribute information, and the second attribute information is attribute information selected from the multiple first attribute information with the highest credibility;

[0016] Acquire the second attribute information based on the first audit result and delete the remaining first attribute information except the second attribute information;

[0017] The attribute information without conflict relationship and the second attribute information are determined as the fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

[0018] Optionally, after respectively determining the credibility of each piece of the first attribute information, the method further includes:

[0019] When it is determined that the credibility of each of the first attribute information is lower than the preset credibility, each of the first attribute information and the corresponding data source are sent to the audit port, and a second audit result after the audit by the audit port is obtained, wherein the second audit result includes third attribute information, and the third attribute information is attribute information selected from a plurality of first attribute information with the highest credibility;

[0020] Based on the second audit result, the third attribute information is obtained and the remaining first attribute information except the third attribute information is deleted; the attribute information without conflict relationship and the third attribute information are determined as the fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

[0021] Optionally, the respectively determining the credibility of each piece of the first attribute information includes:

[0022] Respectively obtain the data source of the asset data to which each of the first attribute information belongs;

[0023] Based on the data sources, the credibility of the first attribute information is determined, wherein each data source has a corresponding credibility.

[0024] Optionally, acquiring asset data from multiple sources and extracting at least one entity information from the asset data includes:

[0025] The asset data is obtained, and information corresponding to an entity of the preset entity set is determined in the asset data based on a preset entity set, and recorded as the entity information, wherein the preset entity set includes at least one entity, and the entity includes at least one of a device, software, a service, a component and a vulnerability.

[0026] Optionally, before determining the attribute information having a conflicting relationship among the plurality of asset data and recording it as the first attribute information, the method further includes:

[0027] Respectively determine the attribute information contained in each asset data, wherein the attribute information includes at least one of an Internet Protocol address, website information, and domain name information;

[0028] Classifying the plurality of asset data respectively according to the attribute information to obtain a plurality of asset data corresponding to each category of the attribute information;

[0029] The attribute information that is determined to have a conflicting relationship among the plurality of asset data is recorded as first attribute information and includes:

[0030] When it is determined that there are differences between the information contents in the attribute information in the plurality of asset data corresponding to the same type of attribute information, the attribute information having the differences in the information contents is determined as the first attribute information.

[0031] In a second aspect, the present application also provides an asset data management and control device, including:

[0032] an extraction unit, configured to obtain asset data from multiple sources and extract at least one entity information from the asset data;

[0033] A fusion unit is used to perform a fusion operation on the plurality of asset data based on the entity information to obtain fused data, wherein the fusion operation is used to merge the asset data having the same entity information.

[0034] Optionally, the fusion unit comprises:

[0035] A first determining module, used for determining attribute information having a conflicting relationship among the plurality of asset data, recorded as first attribute information;

[0036] A second determination module, used to respectively determine the credibility of each of the first attribute information;

[0037] The first fusion module is used to retain the first attribute information with the highest credibility and delete the remaining first attribute information except the first attribute information with the highest credibility; determine the attribute information without conflict relationship and the attribute information with the highest credibility as fused attribute information, and determine the fused attribute information and the corresponding entity information as the fused data.

[0038] Optionally, the fusion unit further includes:

[0039] A first operation module is used for, when it is determined that the number of the first attribute information with the highest credibility exceeds one, sending each of the first attribute information and the corresponding data source to the audit port, and obtaining a first audit result after the audit by the audit port, wherein the first audit result includes second attribute information, and the second attribute information is attribute information selected from the plurality of the first attribute information with the highest credibility;

[0040] A second fusion module is used to obtain the second attribute information based on the first audit result and delete the remaining first attribute information except the second attribute information, and determine the attribute information and the second attribute information that do not have a conflicting relationship as the fused attribute information, and determine the fused attribute information and the corresponding entity information as the fused data.

[0041] Optionally, the fusion unit further includes:

[0042] a second operation module, configured to send each of the first attribute information and the corresponding data source to the audit port when it is determined that the credibility of each of the first attribute information is lower than a preset credibility, and obtain a second audit result after the audit by the audit port, wherein the second audit result includes third attribute information, and the third attribute information is attribute information selected from a plurality of the first attribute information with the highest credibility;

[0043] A third fusion module is used to obtain the third attribute information based on the second audit result and delete the remaining first attribute information except the third attribute information; and to determine the attribute information that does not have a conflicting relationship and the third attribute information as the fused attribute information, and to determine the fused attribute information and the corresponding entity information as the fused data.

[0044] Optionally, the second determination module is specifically used to respectively obtain the data source of the asset data to which each first attribute information belongs; and, based on the data source, determine the credibility of the first attribute information, wherein each data source has a corresponding credibility.

[0045] Optionally, the extraction unit is further specifically used to obtain the asset data, and determine information corresponding to an entity of the preset entity set in the asset data based on a preset entity set, which is recorded as the entity information, wherein the preset entity set includes at least one entity, and the entity includes at least one of a device, software, a service, a component and a vulnerability.

[0046] Optionally, the fusion unit further includes:

[0047] A third determination module, used to respectively determine the attribute information contained in each asset data, wherein the attribute information at least includes at least one of an Internet Protocol address, website information, and domain name information;

[0048] A classification module, used for classifying the plurality of asset data according to the attribute information, to obtain a plurality of asset data corresponding to each type of the attribute information;

[0049] The first determination module is further specifically used to determine the attribute information with the difference in information content as the first attribute information when it is determined that there are differences between the information contents in the attribute information in a plurality of the asset data corresponding to the same type of attribute information.

[0050] In a third aspect, an embodiment of the present application provides a storage medium, which includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the asset data management and control method of the terminal device described in the first aspect.

[0051] In a fourth aspect, an embodiment of the present application provides an asset data management and control device, the device comprising a storage medium; and one or more processors, the storage medium is coupled to the processor, and the processor is configured to execute program instructions stored in the storage medium; when the program instructions are executed, the asset data management and control method of the terminal device described in the first aspect is executed.

[0052] By means of the above technical solution, the technical solution provided by this application has at least the following advantages:

[0053] The present application provides a method and device for asset data management and control. The present application can first obtain asset data from multiple sources and extract at least one entity information from the asset data; then, based on the entity information, perform a fusion operation on the multiple asset data to obtain fused data, wherein the fusion operation is used to merge asset data with the same entity information, thereby realizing the asset data management and control function. Compared with the prior art, in the method of the present application, asset data can be divided in the form of entity information, thereby merging multiple asset data with the same entity information. In this process, since the asset data contains the attribute information corresponding to the entity information, multiple attribute information corresponding to one entity information can be merged during fusion, which ensures that when the asset data of the entity information needs to be output later, the output is the asset data fused with multiple attribute information, thereby ensuring that in the asset data management and control process, multiple attributes of an entity can be merged and output, thereby avoiding the problem that the prior art simply lists multiple asset data of the entity, resulting in its complexity and disorder, thereby facilitating the accurate management and control of asset data by users.

[0054] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] By reading the detailed description below with reference to the accompanying drawings, the above and other purposes, features and advantages of the exemplary embodiments of the present application will become easy to understand. In the accompanying drawings, several embodiments of the present application are shown in an exemplary and non-limiting manner, and the same or corresponding reference numerals represent the same or corresponding parts, wherein:

[0056] Figure 1 A flow chart of a method for managing and controlling asset data provided by an embodiment of the present application is shown;

[0057] Figure 2 A flowchart of another asset data management and control method provided in an embodiment of the present application is shown;

[0058] Figure 3 A block diagram showing a composition of an asset data management and control device provided in an embodiment of the present application is shown;

[0059] Figure 4 A block diagram showing the composition of another asset data management and control device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0060] The exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present application and to fully convey the scope of the present application to those skilled in the art.

[0061] It should be noted that, unless otherwise specified, the technical terms or scientific terms used in this application should have the common meanings understood by technicians in the field to which this application belongs.

[0062] The present application provides a method for managing and controlling asset data. Figure 1 As shown, the method includes:

[0063] 101. Obtain asset data from multiple sources and extract at least one entity information from the asset data.

[0064] In the field of information asset operation of enterprises, enterprises actually need to grasp the current attributes and status of their assets in real time, as well as track the history of changes in asset attributes and status. Due to different information acquisition channels, there will be multiple angles to count asset data, that is, the sources of asset data are different. In this case, there may be data intersections between the parameters and contents recorded for the same entity. In addition, the asset data described in the embodiments of the present application can actually be understood as data containing information related to the assets possessed by the enterprise. Since the enterprise is concerned about the attributes and status of the assets it possesses, these assets must be involved in the asset data. In this embodiment, the entity information can be understood as the entity corresponding to the asset. For example, the asset data in this embodiment can be "the current operating status of device A is good", then in the asset data, the entity information can be "device A".

[0065] 102. Based on the entity information, a fusion operation is performed on multiple asset data to obtain fused data.

[0066] The fusion operation is used to merge asset data with the same entity information.

[0067] Since the entire asset data management and control process is mainly carried out based on the management and control platform, and an enterprise contains a large number of assets, and each asset involves multiple attributes and other information, in this case, when asset data management and control is required, if only the asset data is output, then all of these asset data must be output, resulting in the user needing to further analyze these asset data during analysis and management, and determine which of these asset data belongs to which asset (entity), thereby affecting the accuracy of the managed asset data.

[0068] In view of this, in this step, multiple asset data are divided according to the entity information extracted by each asset data in the above step, and the asset data with the same entity information are fused. In this process, the essence of the fusion operation is to merge the attribute information corresponding to the entity information in each asset data, so that the fused data obtained after the fusion actually contains the sum of the attribute information corresponding to the entity information in the current management and control platform. For example, when there are the following asset data: "The operating status of device A is good", "The receiving signal of device A is normal", "Device A has forwarded 100 tasks", then according to the method of this step, these three asset data all involve the entity information "device A", so the three asset data can be fused, that is, the attribute information in the three asset data is merged, and the merged three attribute information are "operating status is good", "receiving signal is normal" and "100 tasks have been forwarded", so the fused data obtained can be "device A: operating status is good, receiving signal is normal, 100 tasks have been forwarded".

[0069] It should be noted that in the embodiment of the present application, the definition of attribute information can be set based on the needs of the user, and the content, type and quantity of the attribute information are not specifically limited here. Taking the above example in this step as an example, when the attribute information set by the user only involves the operating status and receiving information, then the forwarded task in the third asset data does not need to be merged as attribute information. Therefore, in this case, only the two asset data "the operating status of device A is good" and "the receiving signal of device A is normal" are fused, and the fused data obtained is "device A: the operating status is good and the receiving signal is normal".

[0070] After the fused data is obtained, in the present embodiment, it can be further recorded and outputted, that is, the fused data is recorded, and when the management and control instructions of the entity information are detected, the fused data is outputted.

[0071] When the fused data is obtained, the sum of the attribute information corresponding to each entity information has actually been obtained. Then, in the subsequent process of asset data management and control, it can be directly based on the fused data. Therefore, in this step, the fused data can be recorded so that when the user's management and control instructions are detected later, they can be performed through the fused data. In the process of management and control, operations can be performed based on entity information. That is to say, if the user wants to control an asset, he can issue instructions through the entity information corresponding to the asset. In this way, when the management and control instructions of one or some entity information are detected, the recorded fused data is obtained and output through the entity information, so that the user can know what all the attribute information involved in the current entity information is.

[0072] The present application provides a method for managing and controlling asset data. In an embodiment of the present application, asset data from multiple sources can be first obtained, and at least one entity information can be extracted from the asset data; then, based on the entity information, a fusion operation is performed on the multiple asset data to obtain fused data, wherein the fusion operation is used to merge the asset data with the same entity information, thereby realizing the management and control function of asset data. Compared with the prior art, in the method of the present application, asset data can be divided in the form of entity information, thereby merging multiple asset data with the same entity information. In this process, since the asset data contains the attribute information corresponding to the entity information, multiple attribute information corresponding to one entity information can be merged during fusion, which ensures that when the asset data of the entity information needs to be output later, the output is the asset data fused with multiple attribute information, thereby ensuring that in the process of asset data management and control, multiple attributes of an entity can be merged and output, thereby avoiding the problem that the prior art simply lists multiple asset data of the entity, resulting in its complexity and disorder, thereby facilitating the accurate management and control of asset data by users.

[0073] To explain in more detail below, the present application embodiment provides another asset data management method, as follows Figure 2 As shown, the method includes:

[0074] 201. Obtain asset data from multiple sources and extract at least one entity information from the asset data.

[0075] Specifically, the step of acquiring asset data from multiple sources and extracting at least one entity information from the asset data may be performed as follows:

[0076] The asset data is obtained, and information corresponding to an entity of the preset entity set is determined in the asset data based on a preset entity set, and recorded as the entity information, wherein the preset entity set includes at least one entity, and the entity includes at least one of a device, software, a service, a component and a vulnerability.

[0077] In this embodiment, the entity information can actually be pre-set by the user in a preset entity set, that is, in this embodiment, which nouns in the asset data can be extracted as entities can be controlled based on the preset entity set. For example, assuming that only the entity is set as a device in the preset entity set, then in the process of extracting entity information from the asset data, if the asset data involves software or services but not devices, then the entity information will not be extracted. In this way, it can be ensured that when there is a large amount of asset data, if only a certain type of asset needs to be managed, the consumption and occupation of system resources caused by the management and control of other types of assets can be avoided.

[0078] In addition, in this embodiment, when the method of this embodiment is applied in certain protection scenarios, certain entities need to correspond to the scenarios. At this time, the entities can include vulnerabilities. In this way, in the process of asset management, it is actually possible to manage different assets such as various devices, software, and services, and analyze and control the vulnerabilities involved, thereby ensuring that the management and control of asset data can be adapted to different scenarios and meet the needs of managing certain unique scenario elements in different scenarios.

[0079] 202. Based on the entity information, a fusion operation is performed on multiple asset data to obtain fused data.

[0080] The fusion operation is used to merge asset data with the same entity information.

[0081] Specifically, in this step, based on the entity information, a fusion operation is performed on the plurality of asset data to obtain fused data, which can be performed according to the following steps, including:

[0082] Step A, determining attribute information having a conflicting relationship among the plurality of asset data, and recording the first attribute information;

[0083] Step B, respectively determining the credibility of each of the first attribute information;

[0084] Step C, retain the first attribute information with the highest credibility and delete the remaining first attribute information except the first attribute information with the highest credibility; then, determine the attribute information without conflict relationship and the attribute information with the highest credibility as fused attribute information, and determine the fused attribute information and the corresponding entity information as the fused data.

[0085] Due to the large amount of asset data, in this process, the asset management and control platform will connect to multiple different data ports. In this process, there will definitely be conflicts between asset data collected in different ways. For example, the current operating status of device A in asset data 1 is normal, while the current operating status of device A in asset data 2 is abnormal. Then these two asset data are likely to be collected from different sensors or devices, and there are differences in the results obtained from the two, that is, there may be conflicts between certain attributes collected from multiple aspects of the same asset. In order to ensure the effectiveness of the asset data fusion operation, avoid the influence of these conflicting attributes. In this embodiment, based on step A, it can be determined which one or several attribute information in multiple asset data have a conflicting relationship, that is, the first attribute information. Then, based on step B, the credibility of each of these multiple attribute information in conflict, that is, the first attribute information, is determined respectively. Finally, according to the method of step C, the first attribute information with the highest feasibility is retained, and then the other first attribute information that conflicts with it is deleted. In this way, the retained first attribute information and the attribute information without conflict, that is, the attribute information without conflict, together constitute the fused attribute information. At the same time, the fused attribute information and the entity information can be used to construct fused data. That is to say, the fused data includes both the entity information indicating the current entity and the fused attribute information representing the various attributes of the entity.

[0086] For example, when asset data 1 is "equipment A, attribute 1 is normal", asset data 2 is "equipment A, attribute information 1 is abnormal", and asset data 3 is "equipment A, attribute 2 is normal", then when the fusion operation is performed based on the method of this step, it can actually be determined that both asset data 1 and asset data 2 involve attribute 1, and the specific parameters of the two are conflicting. In this way, if it is determined that the credibility of asset data 1 is high and the credibility of asset data 2 is low, then only attribute 1 as normal can be included in the fusion, and attribute 1 as abnormal can be deleted. In this way, the final fused data after fusion is "equipment A, attribute 1 is normal, attribute 2 is normal".

[0087] Furthermore, in certain scenarios, the credibility of conflicting first attribute information may be the same. In this case, in order to ensure the accurate execution of the fusion operation, it is necessary to hand it over to the audit port. The audit port can be understood as a pre-set one for receiving the first attribute information. The audit can be performed manually through the audit port, or it can be handed over to a preset automatic audit program or service to perform the audit operation. There is no limitation here on the audit method of the audit port that can be set based on the actual needs of the user.

[0088] Based on this, after determining the credibility of each of the first attribute information in step B, the method further includes:

[0089] When it is determined that the number of the first attribute information with the highest credibility exceeds one, each of the first attribute information and the corresponding data source are sent to the audit port, and a first audit result after the audit by the audit port is obtained, wherein the first audit result includes second attribute information, and the second attribute information is attribute information selected from the multiple first attribute information with the highest credibility;

[0090] Based on the first audit result, the second attribute information is obtained and the remaining first attribute information except the second attribute information is deleted; the attribute information and the second attribute information that do not have a conflicting relationship are determined as the fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

[0091] When it is determined that there are multiple first attribute information with the highest credibility, that is, there are more than two attribute information with conflicting relationships, and the credibility of these two attribute information is the same, then in this case, if the fusion operation is performed only according to the credibility, it will be impossible to determine which first attribute information to be retained in the fused data due to the same credibility. In this case, these first attribute information and their data sources can be sent to the audit node. The audit node can be understood as an interface reserved for manual or automated audit programs to intervene in the above-mentioned situation during the fusion operation. In this way, when the relevant operator learns that there are conflicting relationships between multiple attribute information and the credibility is the same, the user can analyze and select one of them as the attribute information to be retained during the fusion operation based on the data source, that is, the second attribute information described in this embodiment, and input it into the asset data management and control platform described in this embodiment based on the first audit result. When the first audit result is detected, the first audit result includes an indication of which attribute information is retained after the audit. Therefore, it can be determined based on the first audit result which attribute information needs to be retained among the first attribute information, that is, multiple attribute information with conflicting relationships and the same credibility, that is, the second attribute information. In this way, the second attribute information is retained and all other first attribute information except the second attribute information is deleted. At this time, the attribute information without conflicting relationships is only the attribute information without conflict, that is, these attribute information can be directly saved and recorded. Then this part of the attribute information and the second attribute information are determined as the fused attribute information, and constitute the fused data with the corresponding entity information. It should be noted that in the remaining attribute information, the categories of the attribute information may be different, so there is no possibility of conflict. It may also be the attribute information of the same category, but the information content of the attribute information is consistent. In this case, these attribute information can be deduplicated and only one can be retained. In this way, there will be no duplicate data in the fused attribute information, which can reduce system expenses and simplify the content of the fused data.

[0092] Furthermore, in some scenarios, the credibility of the first attribute information may be generally low. In this case, if the fusion operation is performed only according to the credibility, it is possible that the fusion is performed when multiple first attribute information are unreliable, thereby affecting the accuracy of subsequent asset data management.

[0093] Based on this, after determining the credibility of each of the first attribute information in step B, the method further includes:

[0094] When it is determined that the credibility of each of the first attribute information is lower than the preset credibility, each of the first attribute information and the corresponding data source are sent to the audit port, and a second audit result after the audit by the audit port is obtained, wherein the second audit result includes third attribute information, and the third attribute information is attribute information selected from a plurality of first attribute information with the highest credibility;

[0095] Based on the second audit result, the third attribute information is obtained and the remaining first attribute information except the third attribute information is deleted; the attribute information without conflict relationship and the third attribute information are determined as the fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

[0096] When it is determined that there is conflicting attribute information, that is, the credibility of the first attribute information is lower than the preset credibility, it means that although there are differences in credibility between the current first attribute information, there may be problems. In this way, these first attribute information and their data sources can be sent to the audit port. At this time, the relevant operators can still analyze which one is relatively reliable based on the data source of each first attribute information when they know that the credibility of these first attribute information is low, and then input it into the platform in the form of the second audit result. At this time, the detected second audit result can determine which one of these first attribute information can be retained, that is, the third attribute information, and then determine the fused attribute information based on the third attribute information and the attribute information without conflict relationship (that is, attribute information without conflict), and combine it with the corresponding entity information to obtain the fused data.

[0097] Furthermore, the step B of determining the credibility of each piece of the first attribute information includes:

[0098] Respectively obtain the data source of the asset data to which each of the first attribute information belongs;

[0099] Based on the data sources, the credibility of the first attribute information is determined, wherein each data source has a corresponding credibility.

[0100] Since the sources of various asset data are actually different during the use of the asset data management and control platform, the credibility of the attribute information can be reflected differently based on the different sources. Based on this, in this embodiment, in the process of determining the credibility of each first attribute information, a judgment can be made based on the data source of the asset data described by each first attribute information, wherein in this step, the credibility of the first attribute information can be determined by the type of data source, that is, different credibility levels can be set for each data source in advance, and then the credibility of the corresponding first attribute information can be determined based on the credibility level.

[0101] In this way, determining the credibility of the corresponding first attribute information through the credibility level of the data source can ensure that in the process of credibility determination, the process of judgment and analysis based on the data source of the asset data to which the attribute information belongs is automatically implemented, thereby ensuring the convenience and automation of each credibility determination process.

[0102] In different application scenarios, the content of the asset data that users need to manage is also different. For example, in some scenarios, users are more concerned about the website information, domain name information and other content related to different devices and tools in the asset data. In this case, the selection of attribute information can also be set based on the needs of the user. The attribute information involving conflicting relationships is the part that the user cares about.

[0103] Based on this, before determining the attribute information having a conflicting relationship in the plurality of asset data in step A and recording it as the first attribute information, the method further includes:

[0104] Respectively determine the attribute information contained in each asset data, wherein the attribute information includes at least one of an Internet Protocol address, website information, and domain name information;

[0105] Classifying the plurality of asset data respectively according to the attribute information to obtain a plurality of asset data corresponding to each category of the attribute information;

[0106] Based on this, the attribute information with conflicting relationships determined in the plurality of asset data in step A is recorded as first attribute information, including:

[0107] When it is determined that there are differences between the information contents in the attribute information in the plurality of asset data corresponding to the same type of attribute information, the attribute information having the differences in the information contents is determined as the first attribute information.

[0108] Based on the above steps, it can be known that when determining the first attribute information, that is, the attribute information with conflicting relationships among multiple asset data, the three attribute information of Internet Protocol address, website information and domain name information can be analyzed. If a certain entity information involves these attribute information, it can be classified according to these attribute information, that is, the Internet Protocol address is divided into one category, the website information is divided into one category, and the domain name information is divided into one category. Then, when the first attribute information is determined in the above step A, it can be determined that in multiple asset data of each type of attribute information, when there are differences in the information content in the attribute information, for example, the multiple attribute information involving website information are: attribute information 1 is website A, attribute information 2 is website B, and attribute information 3 is website C. This is equivalent to indicating that the website addresses corresponding to a certain entity are three different websites, that is, under the category of website address attribute information, there are differences between the information contents (i.e., websites A, B and C), and there is a conflict relationship. Then, it can be determined that the attribute information is the first attribute information.

[0109] 203. Record the fused data, and when a management and control instruction of the entity information is detected, output the fused data.

[0110] Based on the description of the above steps, it can be known that the fused data is the sum of the attribute information corresponding to each entity information. In the subsequent process of asset data management and control, it can be directly based on the fused data. Therefore, in this step, the fused data can be recorded so that when the user's management and control instructions are detected later, they can be carried out through the fused data.

[0111] It should be noted that in the process of management and control, operations can be performed based on entity information. In other words, if a user wants to control an asset, he can control it through the entity information corresponding to the asset. In this way, users can flexibly control the required assets according to their needs.

[0112] Furthermore, as a response to the above Figure 1 and Figure 2 In order to realize the method shown in the figure, another embodiment of the present application also provides an asset data control device. The asset data control device embodiment corresponds to the aforementioned method embodiment. For ease of reading, the asset data control device embodiment will not repeat the details of the aforementioned method embodiment one by one, but it should be clear that the device in this embodiment can correspond to all the contents of the aforementioned method embodiment. Figure 3 As shown, the asset data control device includes:

[0113] The extraction unit 31 may be used to obtain asset data from multiple sources and extract at least one entity information from the asset data;

[0114] The fusion unit 32 may be used to perform a fusion operation on the plurality of asset data based on the entity information to obtain fused data, wherein the fusion operation may be used to merge the attribute information in each asset data corresponding to the entity information;

[0115] Further, such as Figure 4 As shown, the fusion unit 32 includes:

[0116] A first determining module 321 may be used to determine attribute information having conflicting relationships among the plurality of asset data, recorded as first attribute information;

[0117] A second determination module 322 may be used to determine the credibility of each of the first attribute information respectively;

[0118] The first fusion module 323 can be used to retain the first attribute information with the highest credibility and delete the remaining first attribute information except the first attribute information with the highest credibility; determine the attribute information without conflict relationship and the attribute information with the highest credibility as fused attribute information, and determine the fused attribute information and the corresponding entity information as the fused data.

[0119] Further, such as Figure 4 As shown, the fusion unit 32 also includes:

[0120] The first operation module 324 may be used to send each of the first attribute information and the corresponding data source to the audit port when it is determined that the number of the first attribute information with the highest credibility exceeds one, and obtain the first audit result after the audit by the audit port, wherein the first audit result includes the second attribute information, and the second attribute information is the attribute information selected from the plurality of the first attribute information with the highest credibility;

[0121] The second fusion module 325 can be used to obtain the second attribute information based on the first audit result and delete the remaining first attribute information except the second attribute information; and, determine the attribute information and the second attribute information that do not have a conflicting relationship as the fused attribute information, and determine the fused attribute information and the corresponding entity information as the fused data.

[0122] Further, such as Figure 4 As shown, the fusion unit 32 also includes:

[0123] The second operation module 326 may be used to send each of the first attribute information and the corresponding data source to the audit port when it is determined that the credibility of each of the first attribute information is lower than a preset credibility, and obtain a second audit result after the audit by the audit port, wherein the second audit result includes third attribute information, and the third attribute information is attribute information selected from a plurality of first attribute information with the highest credibility;

[0124] The third fusion module 327 can be used to obtain the third attribute information based on the second audit result and delete the remaining first attribute information except the third attribute information; and, determine the attribute information that does not have a conflicting relationship and the third attribute information as the fused attribute information, and determine the fused attribute information and the corresponding entity information as the fused data.

[0125] Further, such as Figure 4 As shown, the second determination module 322 can be specifically used to respectively obtain the data source of the asset data to which each of the first attribute information belongs; and, based on the data source, determine the credibility of the first attribute information, wherein each data source has a corresponding credibility.

[0126] Further, such as Figure 4 As shown, the extraction unit 31 can also be specifically used to obtain the asset data, and determine the information corresponding to the entity of the preset entity set in the asset data based on the preset entity set, which is recorded as the entity information, wherein the preset entity set contains at least one entity, and the entity includes at least one of a device, software, a service, a component and a vulnerability.

[0127] Further, such as Figure 4 As shown, the fusion unit 32 also includes:

[0128] The third determination module 328 may be used to respectively determine the attribute information contained in each of the asset data, wherein the attribute information includes at least one of an Internet Protocol address, website information, and domain name information;

[0129] The classification module 329 may be used to classify the plurality of asset data according to the attribute information to obtain a plurality of asset data corresponding to each type of the attribute information;

[0130] The first determination module 321 can also be specifically used to determine the attribute information with the difference in information content as the first attribute information when it is determined that there are differences between the information contents in the attribute information in multiple asset data corresponding to the same type of attribute information.

[0131] The embodiment of the present application provides a method and device for asset data management and control. The present application can first obtain asset data from multiple sources and extract at least one entity information from the asset data; then, based on the entity information, a fusion operation is performed on the multiple asset data to obtain fused data, wherein the fusion operation is used to merge the asset data with the same entity information, thereby realizing the asset data management and control function. Compared with the prior art, in the method of the present application, the asset data can be divided in the form of entity information, thereby merging multiple asset data with the same entity information. In this process, since the asset data contains the attribute information corresponding to the entity information, multiple attribute information corresponding to one entity information can be merged during the fusion, which ensures that when the asset data of the entity information needs to be output later, the output is the asset data fused with multiple attribute information, thereby ensuring that in the asset data management and control process, multiple attributes of an entity can be merged and output, thereby avoiding the problem that the prior art simply lists multiple asset data of the entity, resulting in its complexity and disorder, thereby facilitating the accurate management and control of asset data by users.

[0132] An embodiment of the present application provides a storage medium, which includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the above-mentioned asset data management and control method.

[0133] The storage medium may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM, and the memory includes at least one storage chip.

[0134] An embodiment of the present application also provides an asset data management and control device, which includes a storage medium; and one or more processors, wherein the storage medium is coupled to the processor, and the processor is configured to execute program instructions stored in the storage medium; when the program instructions are executed, the asset data management and control method described above is executed.

[0135] An embodiment of the present application provides a device, which includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, the following steps are implemented: acquiring asset data from multiple sources, and extracting at least one entity information from the asset data; based on the entity information, performing a fusion operation on the multiple asset data to obtain fused data, wherein the fusion operation is used to merge asset data with the same entity information; recording the fused data, and outputting the fused data when a management and control instruction of the entity information is detected.

[0136] Furthermore, performing a fusion operation on the plurality of asset data based on the entity information to obtain fused data includes:

[0137] Determine the attribute information having conflicting relations among the plurality of asset data, and record it as the first attribute information;

[0138] respectively determining the credibility of each of the first attribute information;

[0139] The first attribute information with the highest credibility is retained and the remaining first attribute information except the first attribute information with the highest credibility is deleted; the attribute information without conflict relationship and the attribute information with the highest credibility are determined as fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

[0140] Furthermore, after respectively determining the credibility of each of the first attribute information, the method further includes:

[0141] When it is determined that the number of the first attribute information with the highest credibility exceeds one, each of the first attribute information and the corresponding data source are sent to the audit port, and a first audit result after the audit by the audit port is obtained, wherein the first audit result includes second attribute information, and the second attribute information is attribute information selected from the multiple first attribute information with the highest credibility;

[0142] Acquire the second attribute information based on the first audit result and delete the remaining first attribute information except the second attribute information;

[0143] The attribute information without conflict relationship and the second attribute information are determined as the fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

[0144] Furthermore, after respectively determining the credibility of each of the first attribute information, the method further includes:

[0145] When it is determined that the credibility of each of the first attribute information is lower than the preset credibility, each of the first attribute information and the corresponding data source are sent to the audit port, and a second audit result after the audit by the audit port is obtained, wherein the second audit result includes third attribute information, and the third attribute information is attribute information selected from a plurality of first attribute information with the highest credibility;

[0146] acquiring the third attribute information based on the second audit result and deleting the remaining first attribute information except the third attribute information;

[0147] The attribute information that has no conflict relationship after deletion and the third attribute information are determined as the fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

[0148] Furthermore, the respectively determining the credibility of each piece of the first attribute information includes:

[0149] Respectively obtain the data source of the asset data to which each of the first attribute information belongs;

[0150] Based on the data sources, the credibility of the first attribute information is determined, wherein each data source has a corresponding credibility.

[0151] Further, the acquiring of asset data from multiple sources and extracting at least one entity information from the asset data includes:

[0152] The asset data is obtained, and information corresponding to an entity of the preset entity set is determined in the asset data based on a preset entity set, and recorded as the entity information, wherein the preset entity set includes at least one entity, and the entity includes at least one of a device, software, a service, a component and a vulnerability.

[0153] Furthermore, before determining the attribute information having a conflicting relationship among the plurality of asset data and recording it as the first attribute information, the method further includes:

[0154] Respectively determine the attribute information contained in each asset data, wherein the attribute information includes at least one of an Internet Protocol address, website information, and domain name information;

[0155] Classifying the plurality of asset data respectively according to the attribute information to obtain a plurality of asset data corresponding to each category of the attribute information;

[0156] The attribute information that is determined to have a conflicting relationship among the plurality of asset data is recorded as first attribute information and includes:

[0157] When it is determined that there are differences between the information contents in the attribute information in the plurality of asset data corresponding to the same type of attribute information, the attribute information having the differences in the information contents is determined as the first attribute information.

[0158] The present application also provides a computer program product, which, when executed on a data processing device, is suitable for executing program code that initializes the following method steps: obtaining asset data from multiple sources and extracting at least one entity information from the asset data; based on the entity information, performing a fusion operation on multiple asset data to obtain fused data, wherein the fusion operation is used to merge asset data with the same entity information; recording the fused data, and outputting the fused data when a management and control instruction of the entity information is detected.

[0159] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0160] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0161] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0162] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1The steps for the functions specified in one or more boxes.

[0163] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0164] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0165] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0166] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0167] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0168] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. A method for managing and controlling asset data, characterized in that: include: Acquire asset data from multiple sources and extract at least one entity information from the asset data; Based on the entity information, a fusion operation is performed on the plurality of asset data to obtain fused data, wherein the fusion operation is used to merge the asset data having the same entity information.

2. The method according to claim 1, characterized in that The asset data records the attribute information corresponding to the entity information attribute; The performing a fusion operation on the plurality of asset data based on the entity information to obtain fused data includes: Determine the attribute information having conflicting relations among the plurality of asset data, and record it as the first attribute information; respectively determining the credibility of each of the first attribute information; retaining the first attribute information with the highest credibility and deleting the remaining first attribute information except the first attribute information with the highest credibility; The attribute information without conflict relationship and the first attribute information with the highest credibility are determined as fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

3. The method according to claim 2, characterized in that After respectively determining the credibility of each of the first attribute information, the method further includes: When it is determined that the number of the first attribute information with the highest credibility exceeds one, each of the first attribute information and the corresponding data source are sent to the audit port, and a first audit result after the audit by the audit port is obtained, wherein the first audit result includes second attribute information, and the second attribute information is attribute information selected from the multiple first attribute information with the highest credibility; Acquire the second attribute information based on the first audit result and delete the remaining first attribute information except the second attribute information; The attribute information without conflict relationship and the second attribute information are determined as the fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

4. The method according to claim 2, characterized in that: After respectively determining the credibility of each of the first attribute information, the method further includes: When it is determined that the credibility of each of the first attribute information is lower than the preset credibility, each of the first attribute information and the corresponding data source are sent to the audit port, and a second audit result after the audit by the audit port is obtained, wherein the second audit result includes third attribute information, and the third attribute information is attribute information selected from a plurality of first attribute information with the highest credibility; acquiring the third attribute information based on the second audit result and deleting the remaining first attribute information except the third attribute information; The attribute information without conflict relationship and the third attribute information are determined as the fused attribute information, and the fused attribute information and the corresponding entity information are determined as the fused data.

5. The method according to claim 2, characterized in that: The respectively determining the credibility of each piece of the first attribute information includes: Respectively obtain the data source of the asset data to which each of the first attribute information belongs; Based on the data sources, the credibility of the first attribute information is determined, wherein each data source has a corresponding credibility.

6. The method according to claim 1, characterized in that The acquiring of asset data from multiple sources and extracting at least one entity information from the asset data comprises: The asset data is obtained, and information corresponding to an entity of the preset entity set is determined in the asset data based on the preset entity set, and recorded as the entity information, wherein the preset entity set includes at least one entity, and the entity includes at least one of a device, software, a service, a component, and a vulnerability.

7. The method according to claim 2, characterized in that Before determining the attribute information having a conflicting relationship among the plurality of asset data and recording it as the first attribute information, the method further includes: Respectively determine the attribute information contained in each asset data, wherein the attribute information includes at least one of an Internet Protocol address, website information, and domain name information; Classifying the plurality of asset data respectively according to the attribute information to obtain a plurality of asset data corresponding to each category of the attribute information; The attribute information that is determined to have a conflicting relationship among the plurality of asset data is recorded as first attribute information and includes: When it is determined that there are differences between the information contents in the attribute information in the plurality of asset data corresponding to the same type of attribute information, the attribute information having the differences in the information contents is determined as the first attribute information.

8. An asset data management and control device, characterized in that: include: an extraction unit, configured to obtain asset data from multiple sources and extract at least one entity information from the asset data; A fusion unit is used to perform a fusion operation on the plurality of asset data based on the entity information to obtain fused data, wherein the fusion operation is used to merge the asset data having the same entity information.

9. A storage medium, characterized in that: The storage medium includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the asset data management and control method described in any one of claims 1 to 7.

10. An asset data management and control device, characterized in that: The device includes a storage medium; and one or more processors, the storage medium is coupled to the processor, and the processor is configured to execute program instructions stored in the storage medium; when the program instructions are executed, the asset data management method described in any one of claims 1 to 7 is executed.

Images