Video monitoring equipment information acquisition control implementation method

Abstract

The invention relates to a video monitoring equipment information acquisition control implementation method which comprises the following steps: detecting the survivability of an IP address, and judging whether the IP address has survivability or not; otherwise, exiting the step; analyzing protocol flow through a PCAP technology and a deep packet inspection technology, and identifying asset information to obtain dpi_data; sending a simulated SSDP request to the IP address, and extracting a specified key character string for describing equipment parameters by analyzing the xml file to obtain upnp_data; carrying out model data matching through the cgi_info script and the hiki_info script; and obtaining the type of the video monitoring equipment through the obtained information so as to obtain technical parameter information. By adopting the video monitoring equipment information acquisition control implementation method, through the technical scheme of data communication protocol analysis and an active and passive mode, the identification accuracy and the identification comprehensiveness of the technical parameter information are improved. Through a collision algorithm and model fitting, a digital model is established for unknown equipment, and complete dependence of a traditional method on a fingerprint database is eliminated.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to the technical field of digital communication, and specifically refers to a method for realizing information collection and control of video surveillance equipment. Background technique [0002] The collection technology for asset category and asset technical parameter information of video surveillance equipment (including cameras, DVRs, NVRs, and management servers) used to use IP detection to find equipment on the network and obtain equipment through port scanning. Open ports and open service types, and then add a label to the device according to the BANNER information of the application service obtained by the crawler. The main purpose of this technology is to obtain the BANNER information of the equipment open service to provide relevant data retrieval and manual judgment of equipment assets. Because this technology only follows the traditional Internet asset col...

AI Technical Summary

Problems solved by technology

Because this technology only follows the traditional Internet asset collection method, there are still deficiencies in the discovery and identification of video surveillance equipment assets in the internal network: 1) For devices that enable access control such as filtering in the internal network environment, this technology cannot discover the device's Some ports exist and cannot be found, resulting in incomplete collection of device information; 2) This technology only crawls and identifies various BANNER information of open services of the device, and does not judge the asset type of the device. After manual query, according to Judging the asset type of the device based on experience; 3) This technology cannot discover and identify more detailed device type information such as firmware version number, API, SDK, device detailed version number, data communication protocol usage, and operating system

Images