The content of the invention
Insufficient present in for the above-mentioned prior art, the present invention provides a kind of safety analysis and visualization of assets information
System and method is managed, ability is presented using the visualization of three-dimensional topology formula, with reference to data acquisition, analysis and is threatened visual etc.
Function, to realize effective management and security protection to assets.
The specific content of the invention includes:
A kind of safety analysis of assets information and Visualized management system, including:Data acquisition subsystem, data analysis subsystem
System, structured data storage subsystem and asset management interface subsystem;
Wherein:
The data acquisition subsystem, for gathering asset structure data;
The data analytics subsystem, for the asset structure data after gathering to be associated analysis according to physical couplings
And be converted to three dimensional space coordinate data;
The structured data storage subsystem, for storing asset structure data;
The asset management interface subsystem visualizes for the asset structure data to storage;
Wherein, asset management interface subsystem includes:Asset edit module, the visual module of assets topology, assets organizational structure can
Depending on module;
The asset edit module, for carrying out visual editing to asset structure data, including asset node it is newly-increased, delete,
The modification of connection relation between the modification of asset structure data and assets;
The visual module of the assets topology, for asset structure data to be visualized by the form of physical topology;
The visual module of assets organizational structure, for asset structure data to be carried out visualization exhibition by institutional framework relation
Show;
The asset structure data include classification, title, number, IP address, MAC Address, affiliated people and the topology of assets even
Connect relation.
Further, the data acquisition subsystem includes:Active probe module and passive collection module;
The active probe module scans sniff to assets progress active probe in network for passing through, gathers asset structure number
According to and be sent to data analytics subsystem;
The passive collection module send for collecting the asset structure Data Concurrent from specified data interface and data format
To data analytics subsystem.
Further, the data analytics subsystem includes:Topological correlation generation module and three dimensional space coordinate modulus of conversion
Block;
The topological correlation generation module, for the asset structure data after gathering to be associated according to physical couplings,
The relation data of topological structure is generated, is used for assets administration interface subsystem;
The three dimensional space coordinate modular converter, for asset node to be sat according to the localization method of three-dimensional coordinate system
Mark conversion, uses for assets administration interface subsystem.
In above system, further include:Event acquisition subsystem, threat analysis subsystem, status data storage subsystem;
Wherein:
The event acquisition subsystem, for gathering Asset State data;
The threat analysis subsystem, for association analysis Asset State data, so as to monitor the safe condition of assets and progress
The safe prestige identification of assets and Risk-warning;
The status data storage subsystem, for storing Asset State data and caching assets labeled data;
Wherein, the Asset State data include:The status data that asset threats monitor and behavior monitoring generates;
The assets labeled data includes:It can be in the markup information that asset management interface subsystem is shown.
Further, the asset management interface subsystem is additionally operable to the assets by the Asset State data of storage and caching
Labeled data is visualized;
The asset management interface subsystem further includes:The visual module of asset threats and assets management module;
The visual module of asset threats, for Asset State data to be visualized, and analyzes the safe condition of assets;
The assets management module, for Asset State data message to be carried out visual editing and the safe condition according to assets
Corresponding disposal operations are carried out to assets.
Further, the event acquisition subsystem, including:Asset threats monitoring modular and assets behavioural analysis module;
The asset threats monitoring modular, for monitoring the safe condition of each asset node;
The assets behavioural analysis module, for analyzing and determining between the individual behavior of each asset node and each asset node
Network behavior.
Further, the threat analysis subsystem, including:Assets prestige identification module, asset risk warning module, money
Production threatens labeling module;
The assets prestige identifies module, for identifying the safe credit index of assets according to the safe condition of assets;
The asset risk warning module carries out Risk-warning for the safe condition according to assets to assets;
The asset threats labeling module for classifying according to the safe condition of assets, is supplied to asset management interface subsystem
As assets labeled data.
In above system, the application state of the safe condition including assets, hardware state, security software protection situation,
Threat detection situation, safe credit index and safe class.
Safety analysis and visual management method the present invention also provides a kind of assets information, including:
Gather asset structure data;
Asset structure data after acquisition according to physical couplings are associated and analyze and be converted to three dimensional space coordinate number
According to;
It stores and the asset structure data of storage is visualized on asset management interface, specifically include:
By asset management interface, visual editing is carried out to asset structure data, increasing newly, deleting, assets including asset node
The modification of connection relation between the modification of structured data and assets;
By asset management interface, asset structure data are passed through into the form of physical topology or can by the progress of institutional framework relation
It is shown depending on changing;
The asset structure data include classification, title, number, IP address, MAC Address, affiliated people and the topology of assets even
Connect relation.
Further, the acquisition asset structure data method includes active probe and passive collection, respectively by sweeping
Sniff is retouched to carry out assets in network active probe and collect the asset structure number from specified data interface and data format
According to passively being collected.
Further, the asset structure data by after acquisition are associated analysis according to physical couplings and convert
It is specifically included for three dimensional space coordinate data:Asset structure data after acquisition are associated according to physical couplings, it is raw
Into the relation data of topological structure, used for assets administration interface;By asset node according to the positioning side of three-dimensional coordinate system
Method carries out coordinate conversion, is used for assets management field.
In the above method, further include:
Gather Asset State data;
Association analysis Asset State data, so as to monitor the safe condition of assets, the safe prestige identification for carrying out assets and wind
Dangerous early warning;
Storage Asset State data and caching assets labeled data are simultaneously visualized;
Wherein, the Asset State data include:The status data that asset threats monitor and behavior monitoring generates;
The assets labeled data includes:The markup information that can be shown at asset management interface.
Further, the assets labeled data of the Asset State data to storage and caching visualizes, specifically
Including:Asset State data are visualized, and analyze the safe condition of assets;
Asset State data message is subjected to visual editing and assets are disposed accordingly according to the safe condition of assets
Operation.
Further, acquisition Asset State data include:
It monitors the safe condition of each asset node and analyzes and determines the individual behavior of each asset node and each assets section
Network behavior between point.
Further, the association analysis Asset State data, the peace including identifying assets according to the safe condition of assets
Full credit index and Risk-warning is carried out to assets according to the safe condition of assets;It further includes according to the safe condition of assets point
Class is supplied to asset management interface as assets labeled data.
In the above method, the application state of the safe condition including assets, hardware state, security software protection situation,
Threat detection situation, safe credit index and safe class.
The beneficial effects of the invention are as follows:
The acquisition mode of more than 1. kinds of asset structure data and Asset State data, including active probe and passive acquisition, Yi Jitong
A variety of acquisition modes such as interface human-edited are crossed to be complementary to one another, ensure asset structure data and Asset State data accuracy and
Integrality.
2. association analysis and visualization presentation ability between asset node.Pass through a variety of passes such as physical topology and organizational structure
It is that the incidence relation of assets is presented in view, and point of deep network behavior etc. can be carried out according to this incidence relation
Analysis and threat monitoring.
3. intuitively, various, flexible threaten visualization presentation ability, cloth is carried out to asset node by three dimensions
Office's displaying carries out a variety of attributes, the mark threatened displaying on asset management interface, can show a variety of marking types simultaneously,
Can emphasis displaying one of which, user can voluntarily select according to demand its observe visual angle and pattern.It is easy to operate, interface
It is directly perceived friendly.
4. the assets credit rating and visual capabilities of high value pass through current and the period of history the threat situation to assets
Analysis, carries out assets comprehensive credit rating, and is shown in a manner of three-dimensional visualization, allows user directly perceived
The safe prestige situation for seeing current each assets, prestige comparison between carries out assets that can be horizontal can also be longitudinal
Check the prestige variation of single assets.User is made to get information about the security protection ability of current asset node, is made rational
Security decision and judgement.
Specific embodiment
In order to which those skilled in the art is made to more fully understand the technical solution in the embodiment of the present invention, and make the present invention's
Above-mentioned purpose, feature and advantage can be more obvious understandable, technical solution in the present invention made below in conjunction with the accompanying drawings further detailed
Thin explanation.
The present invention gives a kind of safety analysis of assets information and the embodiment 1 of Visualized management system, such as Fig. 1 institutes
Show, including:Data acquisition subsystem 10, data analytics subsystem 20, structured data storage subsystem 30 and asset management circle
Face system 40;
Wherein:
Data acquisition subsystem 10, for gathering asset structure data;
Data analytics subsystem 20, for the asset structure data after gathering to be associated analysis simultaneously according to physical couplings
Be converted to three dimensional space coordinate data;
Structured data storage subsystem 30, for storing asset structure data;
Asset management interface subsystem 40 visualizes for the asset structure data to storage;
Wherein, asset management interface subsystem 40 includes:Asset edit module 401, assets topology visual module 402, group of assets
The visual module 403 of stretching frame structure;
Asset edit module 401, for asset structure data to be carried out visual editing, increasing newly, deleting, providing including asset node
The modification of connection relation between the modification of production structured data and assets;User can utilize the asset edit mould as needed
Block 401 carries out personalized editor;
The visual module 402 of assets topology, for asset structure data to be visualized by the form of physical topology;
Wherein, by asset management interface, the device type of each assets can be intuitively seen, the physical connection between assets is closed
System.The displaying at asset management interface lays particular emphasis on the connection relation of object and object at this time.
The visual module 403 of assets organizational structure, for asset structure data to be visualized by institutional framework relation
Displaying;
Wherein, by asset management interface, assets information by organizational structure relation is presented, clearly can fast be understood
The organizational structure information of assets, including top-down department information, personal information, affiliated assets information.Asset management at this time
Showing interface lays particular emphasis on object and the subordinate relation of people.
It the classifications of asset structure data including assets, title, number, IP address, MAC Address, affiliated people and opens up
Flutter connection relation.
Invention also provides a kind of safety analysis of assets information and the embodiment 2 of Visualized management system, such as Fig. 2
It is shown, including:
Data acquisition subsystem 10, data analytics subsystem 20, structured data storage subsystem 30 and asset management interface
System 40;
Wherein:
Data acquisition subsystem 10, for gathering asset structure data;It specifically includes:Active probe module 101 and passive collection
Module 102;
Active probe module 101 scans sniff to assets progress active probe in network for passing through, gathers asset structure data
And it is sent to data analytics subsystem;
Passive collection module 102 send for collecting the asset structure Data Concurrent from specified data interface and data format
To data analytics subsystem.
Data analytics subsystem 20, for the asset structure data after gathering to be associated point according to physical couplings
It analyses and is converted to three dimensional space coordinate data;It specifically includes:Topological correlation generation module 201 and three dimensional space coordinate modular converter
202;
Topological correlation generation module 201, it is raw for the asset structure data after gathering to be associated according to physical couplings
Into the relation data of topological structure, used for assets administration interface subsystem;
Three dimensional space coordinate modular converter 202, for asset node to be sat according to the localization method of three-dimensional coordinate system
Mark conversion, uses for assets administration interface subsystem.
Structured data storage subsystem 30, for storing asset structure data;
Asset management interface subsystem 40 visualizes for the asset structure data to storage;
Wherein, asset management interface subsystem 40 includes:Asset edit module 401, assets topology visual module 402, group of assets
The visual module 403 of stretching frame structure;
Asset edit module 401, for asset structure data to be carried out visual editing, increasing newly, deleting, providing including asset node
The modification of connection relation between the modification of production structured data and assets;User can utilize the asset edit mould as needed
Block 401 carries out personalized editor;
The visual module 402 of assets topology, for asset structure data to be visualized by the form of physical topology;
Wherein, by asset management interface, the device type of each assets can be intuitively seen, the physical connection between assets is closed
System.Asset management showing interface stresses the connection relation with object and object at this time.
The visual module 403 of assets organizational structure, for asset structure data to be visualized by institutional framework relation
Displaying;
Wherein, by asset management interface, assets information by organizational structure relation is presented, clearly can fast be understood
The organizational structure information of assets, including top-down department information, personal information, affiliated assets information.Asset management at this time
Showing interface lays particular emphasis on object and the subordinate relation of people.
It the classifications of asset structure data including assets, title, number, IP address, MAC Address, affiliated people and opens up
Flutter connection relation.
Compared with Example 1, automatic detection and the ability to collect of assets are added in the embodiment simultaneously, embodies assets
The dynamic updating ability of primary attribute, and then carry out data foundation by modes such as newly-built list submissions in conventional method and deposit
Storage, and the primary attribute of many assets is also what multifrequency degree changed, and non-memory is latter into constant, at this moment manually mode is tieed up again
The timeliness of shield is substantially insufficient, and the present embodiment can make up the information search of legacy asset management and safeguard due to manual operation
The problems such as caused information update is sluggish, data are not comprehensive enough.
The present invention also provides a kind of safety analysis of assets information and the embodiment 3 of Visualized management system, such as Fig. 3 institutes
Show, including:
Data acquisition subsystem 10, data analytics subsystem 20, structured data storage subsystem 30 and asset management interface
System 40, event acquisition subsystem 50, threat analysis subsystem 60, status data storage subsystem 70;
Wherein:
Data acquisition subsystem 10, for gathering asset structure data;It specifically includes:Active probe module 101 and passive collection
Module 102;
Active probe module 101 scans sniff to assets progress active probe in network for passing through, gathers asset structure data
And it is sent to data analytics subsystem;
Passive collection module 102 send for collecting the asset structure Data Concurrent from specified data interface and data format
To data analytics subsystem.
Data analytics subsystem 20, for the asset structure data after gathering to be associated point according to physical couplings
It analyses and is converted to three dimensional space coordinate data;It specifically includes:Topological correlation generation module 201 and three dimensional space coordinate modular converter
202;
Topological correlation generation module 201, it is raw for the asset structure data after gathering to be associated according to physical couplings
Into the relation data of topological structure, used for assets administration interface subsystem;
Three dimensional space coordinate modular converter 202, for asset node to be sat according to the localization method of three-dimensional coordinate system
Mark conversion, uses for assets administration interface subsystem.
Structured data storage subsystem 30, for storing asset structure data;
Asset management interface subsystem 40 is visualized for the asset structure data to storage, specifically included:Assets
Editor module 401, assets topology visual module 402, the visual module 403 of assets organizational structure;
Asset edit module 401, for asset structure data to be carried out visual editing, increasing newly, deleting, providing including asset node
The modification of connection relation between the modification of production structured data and assets;User can utilize the asset edit mould as needed
Block 401 carries out personalized editor;
The visual module 402 of assets topology, for asset structure data to be visualized by the form of physical topology;
Wherein, by asset management interface, the device type of each assets can be intuitively seen, the physical connection between assets is closed
System.Asset management showing interface stresses the connection relation with object and object at this time.
The visual module 403 of assets organizational structure, for asset structure data to be visualized by institutional framework relation
Displaying;
Wherein, by asset management interface, assets information by organizational structure relation is presented, clearly can fast be understood
The organizational structure information of assets, including top-down department information, personal information, affiliated assets information.Asset management at this time
Showing interface lays particular emphasis on object and the subordinate relation of people.
It the classifications of asset structure data including assets, title, number, IP address, MAC Address, affiliated people and opens up
Flutter connection relation.
In above system embodiment, the asset management interface subsystem 40 can be additionally used in the Asset State data of storage
It is visualized with the assets labeled data of caching;
The asset management interface subsystem 40 further includes:The visual module 404 of asset threats and assets management module 405;
The visual module 404 of asset threats, for Asset State data to be visualized, so as to analyze the safe condition of assets;
Assets management module 405, for Asset State data message to be carried out visual editing and the safe condition according to assets
Corresponding disposal operations are carried out to assets.
Wherein, by asset management interface, assets labeled data is presented by the form of additional mark, i.e., as a means of
The three-dimensional visualization of production topology or assets organizational structure shows form for interface main body, and various shapes are carried out on the periphery of asset node
State marks.Different types of mark can select to show or hide, and a certain attribute labeling can be presented with emphasis, can also be same
The a variety of attribute labelings of Shi Chengxian.User can voluntarily select the presentation mode for being suitble to oneself, according to the asset threats situation shown,
The safe condition of assets is analyzed.
Furthermore it is also possible to directly the structured data and status data of assets are operated at asset management interface, on boundary
It may search in face and choose the asset node for wanting to be operated.Can check asset node details, including but it is unlimited
In the structured data and status data of asset node, can also modify to data, can also be according to threat situation at
Put operation.
Wherein disposal operations include but not limited to trace APT, Scan for Viruses, patching bugs.
Event acquisition subsystem 50, for gathering Asset State data;It specifically includes:501 He of asset threats monitoring modular
Assets behavioural analysis module 502;
Asset threats monitoring modular 501, for monitoring the safe condition of each asset node;
Wherein, asset threats monitoring includes:It is software to assets, hard by the terminal monitoring equipment disposed on asset node
Situations such as part, operating system, registration table, file operation, is monitored, and is alerted when there is abnormal conditions.
Assets behavioural analysis module 502, for analyzing and determining the individual behavior of each asset node and each asset node
Between network behavior.
Wherein, the network behavior includes normal communication behavior and exceptional communication behavior;The exceptional communication behavior includes:
Wooden horse implantation, DDos attacks, invermination, abnormal scanning, abnormal data interaction, abnormal document transmission.
Threat analysis subsystem 60, for association analysis Asset State data, so as to the safe condition that monitors assets and into
The safe prestige identification of row assets and Risk-warning;It specifically includes:Assets prestige identification module 601, asset risk warning module
602nd, asset threats labeling module 603;
Assets prestige identifies module 601, for identifying the safe credit index of assets according to the safe condition of assets;
Wherein it is possible to according to the compromised data of the current safety situation and history of assets, to judge the security protection of assets
Ability and situation about currently being attacked can make the safe prestige of assets the evaluation of estimate of one globality.Make user
Prestige identification can be carried out to each assets, and the comparison of safe credit index can be carried out between multiple assets.
Asset risk warning module 602 carries out Risk-warning for the safe condition according to assets to assets;
It is analyzed wherein it is possible to carry out protective capacities and fragility to assets, according to its current protective capacities and known big
Scale network risk situation carries out Risk-warning to it, such as finds the great 0day loopholes of certain software, can be in asset node
The software version, loophole situation analyzed, and summarizes the asset data for protecting this loophole and its distribution, makes manager can be with
Risk situation clearly is viewed, and makes disposal in real time.
Asset threats labeling module 603 for classifying according to the safe condition of assets, is supplied to asset management interface subsystem
System is as assets labeled data.
Wherein it is possible to taxonomic revision is carried out to asset threats situation, such as according to current assets security credit index, peace
Congruent grade, Virus Infection, there are loophole situations, if after sorting out by data preparations such as APT attacks, is supplied to assets
Administration interface subsystem is presented, and user is allow to check the threat situation that assets bear by objective interface.
It in addition, because of assets labeled data wide variety, and is changed at any time, especially dynamic attribute data mark portion
Point, it can most be acquired within every 10 seconds soon, interface can also carry out the refreshing of state mark according to the dynamic change of data at any time, because
The assets labeled data that asset management interface is read in real time is put into status data storage subsystem by this.Then acquisition of rear end
System and analyzing subsystem can at a high speed be read with high speed writein, front end assets interface management subsystem.
In above system, the application state of the safe condition including assets, hardware state, security software protection situation,
Threat detection situation, safe credit index and safe class.
Wherein, the application state includes but not limited to operating system, OA systems, fire wall and mail;
The hardware state includes but not limited to online situation, hardware fault;Trigger online situation state.
Status data storage subsystem 70, for storing Asset State data and caching assets labeled data;
Wherein, the Asset State data include:The status data that asset threats monitor and behavior monitoring generates;
The assets labeled data includes:It can be in the markup information that asset management interface subsystem is shown.
Wherein, the status data further includes static attribute data and dynamic attribute data;
The static attribute data include:Software installation list, hardware resource list;
The dynamic attribute data include:The online information off-line of assets, hardware resource consumption information, security software protection letter
Breath, safe degrees of comparison and assets network behavior;Also current latest data and historical data are included, historical data is available for other
Module uses.
The visual module 404 of asset threats and asset management that asset management interface subsystem 40 in the system is included
Module 405 can be some security incidents can be presented in real time, to the current safety of assets in the form of dynamic label placement
State is visualized.User can be made intuitively to see the safe condition of current asset, respond and dispose in time.
Threat analysis subsystem 60 in the system makes whole system possess behavioural analysis ability and credit rating ability,
Therefore the network behavior between multiple assets is analyzed, judges relative influence, be capable of the source of fast and accurately pinpoint threat
Head monitors the coverage of threat, and Key Asset is protected and disposed in advance, possesses credit rating ability, management
Member can promote the security protection ability of assets by effective means, avoid the generation of security incident.
The present invention gives a kind of safety analysis of assets information and the embodiment of visual management method, as shown in figure 4, bag
It includes:
S401, acquisition asset structure data;
S402, the asset structure data after acquisition according to physical couplings are associated and analyze and be converted to three dimensions seat
Mark data;
S403, storage simultaneously visualize the asset structure data of storage on asset management interface, specifically include:
By asset management interface, visual editing is carried out to asset structure data, increasing newly, deleting, assets including asset node
The modification of connection relation between the modification of structured data and assets;
By asset management interface, asset structure data are passed through into the form of physical topology or can by the progress of institutional framework relation
It is shown depending on changing;
Wherein, by such mode, the device type of each assets can be intuitively seen very much, the physical connection between assets is closed
System.Stress the connection relation with object and object in this visual interface.By asset management interface, asset structure data are passed through into tissue
Structural relation is visualized, and the organizational structure information of assets clearly can be fast understood, including top-down department
Information, personal information, affiliated assets information.This visual interface lays particular emphasis on object and the subordinate relation of people.
It the classifications of asset structure data including assets, title, number, IP address, MAC Address, affiliated people and opens up
Flutter connection relation.
Preferably, the acquisition asset structure data method includes active probe and passive collection, respectively passes through scanning
Sniff carries out assets in network active probe and collects the asset structure data from specified data interface and data format
Passively to be collected.
It is highly preferred that the asset structure data by after acquisition are associated analysis according to physical couplings and convert
It is specifically included for three dimensional space coordinate data:Asset structure data after acquisition are associated according to physical couplings, it is raw
Into the relation data of topological structure, used for assets administration interface;By asset node according to the positioning side of three-dimensional coordinate system
Method carries out coordinate conversion, is used for assets management field.
In above method embodiment, further include:
Gather Asset State data;
Association analysis Asset State data, so as to monitor the safe condition of assets, the safe prestige identification for carrying out assets and wind
Dangerous early warning;
Storage Asset State data and caching assets labeled data are simultaneously visualized;
Wherein, the Asset State data include:The status data that asset threats monitor and behavior monitoring generates;
Wherein, the status data further includes static attribute data and dynamic attribute data;
The static attribute data include:Software installation list, hardware resource list;
The dynamic attribute data include:The online information off-line of assets, hardware resource consumption information, security software protection letter
Breath, safe degrees of comparison and assets network behavior;Also current latest data and historical data are included, historical data is available for other
Module uses.
The assets labeled data includes:The markup information that can be shown at asset management interface.
Wherein, by asset management interface, assets labeled data is presented by the form of additional mark, i.e., as a means of
The three-dimensional visualization of production topology or assets organizational structure shows form for interface main body, and various shapes are carried out on the periphery of asset node
State marks.Different types of mark can select to show or hide, and a certain attribute labeling can be presented with emphasis, can also be same
The a variety of attribute labelings of Shi Chengxian.User can voluntarily select the presentation mode for being suitble to oneself, according to the asset threats situation shown,
The safe condition of assets is analyzed.
Preferably, the assets labeled data of the Asset State data to storage and caching visualizes, specific to wrap
It includes:Asset State data are visualized, and analyze the safe condition of assets;
Asset State data message is subjected to visual editing and assets are disposed accordingly according to the safe condition of assets
Operation.
Wherein disposal operations include but not limited to trace APT, Scan for Viruses, patching bugs etc..
Preferably, acquisition Asset State data include:
It monitors the safe condition of each asset node and analyzes and determines the individual behavior of each asset node and each assets section
Network behavior between point.
Wherein, the safe condition for monitoring each asset node is further included and set by the terminal monitoring disposed on asset node
It is standby, situations such as software of assets, hardware, operating system, registration table, file operation, is monitored, when there is abnormal conditions into
Row alarm.
Preferably, the association analysis Asset State data, the safety including identifying assets according to the safe condition of assets
Credit index and Risk-warning is carried out to assets according to the safe conditions of assets;It further includes according to the safe condition of assets point
Class is supplied to asset management interface as assets labeled data.
Wherein it is possible to according to the compromised data of the current safety situation and history of assets, to judge the safety of assets
Protective capacities and situation about currently being attacked can make the safe prestige of assets the evaluation of estimate of one globality, make
User can carry out safe prestige identification to each assets, and the comparison of safe credit index can be carried out between multiple assets.
It is analyzed wherein it is possible to carry out protective capacities and fragility to assets, according to its current protective capacities and known
Large scale network risk situation, Risk-warning is carried out to it, such as find the great 0day loopholes of certain software, can be to assets section
The version of the software in point, loophole situation are analyzed, and are summarized the asset data for protecting this loophole and its distribution, are made manager
Risk situation can be clearly viewed, and makes disposal in real time.
Preferably, the safe condition includes application state, hardware state, security software the protection situation of assets, threatens
Detection case, safe credit index and safe class
Wherein, the application state includes but not limited to operating system, OA systems, fire wall and mail;
The hardware state includes but not limited to online situation, hardware fault;Trigger online situation state.
A kind of safety analysis of assets information of present invention proposition and Visualized management system and embodiment of the method, by building
Data acquisition subsystem, data analytics subsystem, structured data storage subsystem and asset management interface subsystem and thing
The collaborative work of multiple subsystems such as part acquisition subsystem, threat analysis subsystem, status data storage subsystem, can allow money
Production manager monitors variation and the fail-safe condition of assets constantly, and accurate analysis is made to the threat situation that assets are subjected to
And judgement, it can adopt an effective measure and assets are protected.
Although depicting the present invention by embodiment, it will be appreciated by the skilled addressee that the present invention there are many deformation and
Change the spirit without departing from the present invention, it is desirable to which appended claim includes these deformations and changes without departing from the present invention's
Spirit.