Network target range asset information acquisition method and device based on active and passive combination

Abstract

The embodiment of the invention discloses a network range asset information collection method and device based on active and passive combination, and relates to the field of network security, and themethod comprises the steps: analyzing and recording fingerprint features, and constructing an operating system fingerprint comparison sample library and a service application or component fingerprintcomparison sample library; configuring a networking host in a detection network target range environment; collecting operating system information and service application or component information of the networked host in an active detection mode to form asset information data; collecting operating system information and service application or component information of the networked host in a passivedetection mode to form asset information data; and integrating asset information data acquired by active detection and passive detection to form a complete network range asset information list.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method and device for collecting asset information of a network shooting range based on active and passive combination. Background technique [0002] The network shooting range is a professional laboratory for conducting network offensive and defensive weapon tests, and it is also a training ground for the "cyber army" of various countries to practice tactical tactics in advance. The network shooting range combines the virtual environment with real equipment to simulate the real cyberspace offensive and defensive combat environment, which can effectively conduct war rehearsals against the enemy's electronic and network attacks, and rapidly improve the network offensive and defensive combat capabilities. The network shooting range environment is complex, there are multiple regional isolations, multiple combinations of virtual machines and physical machines, and the coexistence of...

AI Technical Summary

Problems solved by technology

[0003] In view of this, the embodiment of the present invention provides a network shooting range asset information collection method and device based on the combination of active and passive. The active and passive combination is used to collect asset information in the network shooting range environment, which is a good solution to the current network problems. The shooting range environment is complex, there are multi-area isolation, multiple combinations of virtual machines and physical machines, and the coexistence of virtual assets and physical assets. Pure virtual asset management cannot realize the comprehensive management of assets in the entire network shooting range environment. In order to conduct a comprehensive and complete discovery and collection of assets in the network range environment, and provide more effective data for subsequent asset management in the network range

Images