IT asset risk situation awareness display method

Abstract

The invention provides an IT asset risk situation awareness display method. The IT asset risk situation awareness display method comprises the following steps of S1, building an asset model; S2, exporting an obj format file, and generating a drc file; S3, releasing the drc file generated in the step S2 as a static file, setting rendering conditions, selecting a loader, and transmitting an addressreleased by the static file into the loader for preliminary rendering; S4, inputting IT asset protection information, and binding asset information; S5, enabling a rear end to start monitoring and recording attack data; S6, enabling the rear end to transmit the recorded attack data to the front end page in real time, after the front end page receives the attack data, enabling the front end page toinquire the single model where the target node is located according to the bound information, then draw an attacked unit node, draw an attack route, carry out real-time updating and rendering, and vividly display hidden attack behaviors in real time. Abstraction virtual network attacks can be fully vivid, and asset risk situations can be visually displayed.

Description

technical field [0001] The invention relates to the field of network attack and defense asset risk analysis visualization, in particular to an IT asset risk situation awareness display method. Background technique [0002] Security awareness is the core of the security defense system. In the face of hidden attacks and penetration tests by hackers, whether it can be identified and discovered in the first place is the fundamental measure of the quality of the security system. Therefore, visualization technology has been used in a certain range in the security field. But at present, the visual display of network attacks is concentrated on the display of attacks at the national, provincial and municipal levels, and the use of internal IT asset risk display is seldom used. After a network attack occurs, only rely on security operation and maintenance personnel to use technical instructions to check layer by layer, and gradually locate the attacked assets. Such a method is not o...

AI Technical Summary

Problems solved by technology

Therefore, in the IT asset management system of this patent document, the maintenance personnel only need to configure the IP address set of the asset group, and the system can automatically calculate and display the association between the asset groups in a graphical form, which simplifies the creation of asset groups. process, without the need to manually maintain the organizational structure; that is, the above-mentioned patent documents only show assets, but cannot show hidden network attacks

Images