CN112383562A - Intranet safety information display method and device, electronic equipment and storage medium - Google Patents
Intranet safety information display method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN112383562A CN112383562A CN202011374469.3A CN202011374469A CN112383562A CN 112383562 A CN112383562 A CN 112383562A CN 202011374469 A CN202011374469 A CN 202011374469A CN 112383562 A CN112383562 A CN 112383562A
- Authority
- CN
- China
- Prior art keywords
- information
- intranet
- access token
- safety information
- query request
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 52
- 230000000007 visual effect Effects 0.000 claims abstract description 52
- 238000004590 computer program Methods 0.000 claims description 10
- 238000006243 chemical reaction Methods 0.000 claims description 6
- 238000001914 filtration Methods 0.000 claims description 6
- 238000012545 processing Methods 0.000 claims description 5
- 238000012800 visualization Methods 0.000 claims description 5
- 230000004044 response Effects 0.000 claims description 4
- 238000012423 maintenance Methods 0.000 abstract description 5
- 238000004891 communication Methods 0.000 description 7
- 238000010586 diagram Methods 0.000 description 6
- 238000005516 engineering process Methods 0.000 description 5
- 230000008569 process Effects 0.000 description 4
- 230000005236 sound signal Effects 0.000 description 4
- 230000009471 action Effects 0.000 description 3
- 239000008186 active pharmaceutical agent Substances 0.000 description 3
- 238000013480 data collection Methods 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 102100038367 Gremlin-1 Human genes 0.000 description 1
- 101001032872 Homo sapiens Gremlin-1 Proteins 0.000 description 1
- 238000003491 array Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 238000012552 review Methods 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/30—Creation or generation of source code
- G06F8/38—Creation or generation of source code for implementing user interfaces
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
Landscapes
- Engineering & Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Human Computer Interaction (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- User Interface Of Digital Computer (AREA)
Abstract
The application discloses an intranet safety information display method, an intranet safety information display device, electronic equipment and a computer readable storage medium, wherein the method comprises the following steps: acquiring an access token, and sending an information query request by using the access token; acquiring intranet safety information responding to the information query request; carrying out visual display on the safety information of the intranet by using a visual interface generated based on a graph traversal language; according to the method, the internal network safety information is visually displayed by using the visual interface generated based on the graph traversal language, the internal network safety information does not need to be manually consulted, and the information reading efficiency is improved. The visual display mode enables operation and maintenance personnel to quickly and clearly know the safety condition of the intranet and timely discover the safety threat.
Description
Technical Field
The present application relates to the field of network security technologies, and in particular, to an intranet security information display method, an intranet security information display apparatus, an electronic device, and a computer-readable storage medium.
Background
The safety of the internal network is always the key of the safety of the enterprise, along with the innovation of the technology, particularly the emergence of the Azure AD, a plurality of enterprises deploy the service on the Azure AD, and the safety of the Azure AD is a new direction at present. When carrying out intranet safety inspection, the correlation technique can send the request in order to obtain the intranet safety information that can represent intranet safety, and intranet safety information is the json form, and the operation and maintenance personnel can master intranet safety through looking up intranet safety information, however, directly look up the mode of intranet safety information and make information reading efficiency lower, and the required time is longer, can't in time discover security threat.
Therefore, the related art has a low information reading efficiency, and cannot find a security threat in time, which is a technical problem to be solved by a person skilled in the art.
Disclosure of Invention
In view of this, an object of the present application is to provide an intranet security information display method, an intranet security information display apparatus, an electronic device, and a computer-readable storage medium, which improve information reading efficiency and can discover security threats in time.
In order to solve the technical problem, the present application provides an intranet security information display method, including:
acquiring an access token, and sending an information query request by using the access token;
acquiring intranet safety information responding to the information query request;
and visually displaying the intranet safety information by using a visual interface generated based on a graph traversal language.
Optionally, the visually displaying the intranet security information by using a visual interface generated based on a graph traversal language includes:
carrying out format conversion processing on the intranet safety information by using the visual interface to obtain a graphic object;
and visually outputting the graphic object.
Optionally, the method further comprises:
acquiring configuration information, and performing visual setting by using the configuration information;
correspondingly, the visually outputting the graphic object comprises:
visually outputting the image object based on the visualization setting.
Optionally, the obtaining the access token includes:
sending a registration request for registering an application;
an application ID in response to the registration request is acquired, and the application degree ID is determined as the access token.
Optionally, the sending an information query request by using the access token includes:
judging whether the reading authority is available;
if the access token has the reading permission, the information query request is sent by using the access token;
and if the reading authority is not available, outputting an error prompt.
Optionally, the sending an information query request by using the access token includes:
acquiring character string setting information;
and sending the information query request based on the character string setting information by using the access token.
Optionally, the method further comprises:
performing type filtering on the intranet safety information to obtain target intranet safety information;
and visually displaying the target intranet safety information by using a BloodHound tool.
The application also provides an intranet safety information display device, include:
the request sending module is used for acquiring an access token and sending an information query request by using the access token;
the information acquisition module is used for acquiring intranet safety information responding to the information inquiry request;
and the visual display module is used for visually displaying the intranet safety information by utilizing a visual interface generated based on a graph traversal language.
The present application further provides an electronic device comprising a memory and a processor, wherein:
the memory is used for storing a computer program;
the processor is used for executing the computer program to realize the intranet safety information display method.
The application also provides a computer readable storage medium for storing a computer program, wherein the computer program is executed by a processor to implement the intranet security information display method.
According to the intranet safety information display method, the access token is obtained, and the information query request is sent by the access token; acquiring intranet safety information responding to the information query request; and carrying out visual display on the safety information of the intranet by using a visual interface generated based on the graph traversal language.
Therefore, the method can be used for sending an information query request after the access token is obtained to request to obtain the intranet safety information. After the intranet safety information is obtained, the intranet safety information can be visually displayed by using a visual interface. Because the visual interface is generated based on the graph traversal language, and the graph traversal language is compatible with the intranet safety information in the json format, the visual interface can analyze the intranet safety information and comprehensively visually display the intranet safety information. According to the method, the internal network safety information is visually displayed by using the visual interface generated based on the graph traversal language, the internal network safety information does not need to be manually consulted, and the information reading efficiency is improved. The mode of visual show makes operation and maintenance personnel can know intranet security condition fast, clearly, in time discovers the security threat, and the information that has solved the correlation technique existence reads efficiency lower, can't in time discover the problem of security threat.
In addition, the application also provides an intranet safety information display device, electronic equipment and a computer readable storage medium, and the intranet safety information display device, the electronic equipment and the computer readable storage medium also have the beneficial effects.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments or related technologies of the present application, the drawings needed to be used in the description of the embodiments or related technologies are briefly introduced below, it is obvious that the drawings in the following description are only embodiments of the present application, and for those skilled in the art, other drawings can be obtained according to the provided drawings without creative efforts.
Fig. 1 is a flowchart of an intranet security information display method according to an embodiment of the present application;
FIG. 2 is a schematic diagram of a data flow according to an embodiment of the present application;
fig. 3 is a schematic structural diagram of an intranet security information display apparatus according to an embodiment of the present application;
fig. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
Referring to fig. 1, fig. 1 is a flowchart of an intranet security information display method according to an embodiment of the present disclosure. The method comprises the following steps:
s101: and acquiring an access token, and sending an information query request by using the access token.
It should be noted that the intranet environment in this embodiment is an Azure AD environment, that is, an Active Directory environment constructed based on Microsoft Azure. Microsoft Azure is a Microsoft cloud computing based operating system, and its main objective is to provide a platform for developers to help develop applications that can run on cloud servers, data centers, Web and PCs, and the developers of cloud computing can use storage, computing power and network infrastructure services of Microsoft global data centers. Before obtaining the intranet security information, an access token needs to be obtained, and an information query request is sent by using the access token. The access token is used for granting the authority for accessing resources, and only the access token is acquired, the intranet security information can be requested to be acquired, namely, the information query request is sent. The present embodiment does not limit the form of the access token, for example, in a feasible implementation, the access token may be an application ID obtained after registering the application, and in this case, the step of obtaining the access token may include:
step 11: a registration request for registering an application is sent.
Step 12: an application ID in response to the registration request is acquired, and the application level ID is determined as the access token.
By sending a registration request, the application may be registered so that the corresponding application ID is obtained after the application registration is completed. Specifically, a registration request may be sent to the Microsoft platform, which may be specifically apps.
After the access token is acquired, it can be used to send a request for information inquiry. Further, in order to prevent information leakage which may occur due to random inquiry of intranet security information, it is preferable that whether a read permission exists or not may also be determined. The step of sending an information query request using the access token may include:
step 21: and judging whether the read authority is available.
Step 22: and if the access token has the reading authority, sending an information query request by using the access token.
Step 23: if the read authority is not available, an error prompt is output.
The reading permission is specifically user. Therefore, when the information inquiry request is sent, whether the information inquiry request has the reading authority is judged, and if the information inquiry request has the reading authority, the information inquiry request can be generated and sent by using the access token. By sending the information query request, Microsoft Graph API, which is a Web API (i.e., a network interface) that can access Microsoft cloud service resources, can be called to collect the internet data.
In one possible embodiment, the step of sending the information query request by using the access token may include:
step 31: character string setting information is acquired.
Step 32: an information query request is transmitted based on the character string setting information using the access token.
The character string setting information is used for setting the query parameters and setting the specific content of the information query request. Specifically, Microsoft Graph generally uses OData system query, so the query parameter may be an OData system query option, that is, the character string setting information may be used to set the query parameter as an OData system query option. The query parameter may also be other self-defined character strings that can be responded to, which is not limited in this embodiment. By sending the information query request based on the character string setting information, the user can be allowed to perform intranet information query according to actual needs. The AfzureAD uses OAuth2.0 to authorize and access Web application programs and Web APIs in the AfzureAD, so that data can be retrieved through the Afzure Oauth to obtain intranet safety information. Specifically, azure oauth. config may be modified with the access token after it is acquired, and a URL for the application (i.e., an external listener) is added as a redirect URL, based on which the transmitted information query request can be responded to and executed by the server.
S102: and acquiring intranet safety information responding to the information inquiry request.
After the information query request is sent to the server, the intranet safety information responding to the information query request can be obtained. Intranet security information is a json-formatted file, and can be classified into six json files of applications, computers, domains, groups, sessions and users. The embodiment does not limit the specific manner of acquiring the intranet security information, for example, the intranet security information sent by the server may be acquired, or the intranet security information may be stored in a database, for example, may be stored in an Azure Cosmos DB (DB, Data Base, database), or may be imported into a neo4j database, and the intranet security information is obtained by reading the database.
Referring to fig. 2, fig. 2 is a schematic diagram of a data flow according to an embodiment of the present disclosure. When the data collection device obtains the information query request, the data collection device can retrieve data through the Azure Oauth to obtain the intranet safety information. And the intranet safety information is sent to the database for transfer. The Graph Explorer graphical visualization interface in fig. 2 is a visualization interface generated based on a Graph traversal language in this embodiment.
S103: and carrying out visual display on the safety information of the intranet by using a visual interface generated based on the graph traversal language.
Since the json format data is not compatible with most visual interfaces, the related art needs to manually review and analyze the json format data. The efficiency of manual looking up is lower, and can not guarantee to obtain the information accurately. The visual interface generated based on the graph traversal language is adopted to visually display the graph traversal language in the embodiment, the graph traversal language can be specifically Gremlin language, the graph traversal language is compatible with json format data, the graph traversal language can be analyzed and comprehensively displayed, through visually displaying the intranet safety information, a user can visually and accurately know the intranet safety condition, the information reading efficiency is improved, and the safety threat can be found in time. The visual interface generated based on the graph traversal language can also support the function of querying by utilizing the graph traversal language, and the information acquisition efficiency is further improved.
Specifically, the step S103 may include:
step 41: and carrying out format conversion processing on the intranet safety information by using the visual interface to obtain a graphic object.
Step 42: and visually outputting the graphical object.
The graphic object represents the intranet security information in the form of an image, and the specific content of the graphic object is not limited, and may be, for example, a network topology map. The specific format conversion process is not limited. The object of the visual output may be any device or terminal with a display device, for example, a display screen, a computer, etc.
Further, before visually outputting the graphical object, the method may further include:
step 51: acquiring configuration information, and performing visual setting by using the configuration information;
accordingly, the step of visually outputting the graphical object may comprise:
step 52: and visually outputting the image object based on the visual setting.
The configuration information is used for performing visualization setting, namely how to visually output the image object. Specifically, when performing visual output, output may be performed based on a profile of appsettings. In order to meet the output requirements of users, i.e. operation and maintenance personnel, the output requirements can be set. The configuration information can be used for modifying the configuration file to complete the visual setting. The configuration information can also be a configuration file, and the visual setting is completed by replacing the original configuration file. When the graphical object needs to be visually output, the graphical object can be visually output based on the visual setting.
Furthermore, intranet safety information can be displayed by using a BloodHound tool, the BloodHound uses a graphic theory to automatically find out the relations and details of most of personnel in an Active Directory environment, and can be used for deeply knowing some user relations of AD, knowing which users have administrator rights, which users have management rights to any computer, effective user group member information and the like. Therefore, the present embodiment may further include:
step 61: and filtering the type of the intranet safety information to obtain target intranet safety information.
Step 62: and visually displaying the target intranet safety information by using a BloodHound tool.
Because the bloodHound tool can only display the user relationship and cannot comprehensively display all the contents of the intranet safety information, the type of the intranet safety information needs to be filtered when the bloodHound tool is used for carrying out visual display, and the target intranet safety information is obtained. Specifically, the target intranet security information includes computers, domains, groups and users files. After filtering, the display can be visually displayed by using the filter, and the specific display process can refer to the related technology, which is not described herein again.
By applying the intranet safety information display method provided by the embodiment of the application, after the access token is obtained, the access token can be used for sending an information query request to request for obtaining intranet safety information. After the intranet safety information is obtained, the intranet safety information can be visually displayed by using a visual interface. Because the visual interface is generated based on the graph traversal language, and the graph traversal language is compatible with the intranet safety information in the json format, the visual interface can analyze the intranet safety information and comprehensively visually display the intranet safety information. According to the method, the internal network safety information is visually displayed by using the visual interface generated based on the graph traversal language, the internal network safety information does not need to be manually consulted, and the information reading efficiency is improved. The mode of visual show makes operation and maintenance personnel can know intranet security condition fast, clearly, in time discovers the security threat, and the information that has solved the correlation technique existence reads efficiency lower, can't in time discover the problem of security threat.
In the following, the intranet security information display apparatus provided in the embodiment of the present application is introduced, and the intranet security information display apparatus described below and the intranet security information display method described above may be referred to in a corresponding manner.
Referring to fig. 3, fig. 3 is a schematic structural diagram of an intranet security information display apparatus according to an embodiment of the present application, including:
a request sending module 110, configured to obtain an access token, and send an information query request by using the access token;
an information obtaining module 120, configured to obtain intranet security information responding to the information query request;
and the visual display module 130 is configured to perform visual display on the intranet security information by using a visual interface generated based on the graph traversal language.
Optionally, the visual presentation module 130 comprises:
the format conversion unit is used for carrying out format conversion processing on the intranet safety information by utilizing a visual interface to obtain a graphic object;
and the output unit is used for visually outputting the graphic object.
Optionally, the method further comprises:
the visual setting module is used for acquiring the configuration information and performing visual setting by using the configuration information;
accordingly, an output unit comprising:
and the output subunit is used for performing visual output on the image object based on the visual setting.
Optionally, the request sending module 110 includes:
a registration request transmitting unit for transmitting a registration request for registering an application;
an application level ID acquisition unit configured to acquire an application ID in response to the registration request, and determine the application level ID as the access token.
Optionally, the request sending module 110 includes:
the authority judging unit is used for judging whether the reading authority is available;
the first sending unit is used for sending an information inquiry request by using the access token if the access token has the reading authority;
and the prompt output unit is used for outputting an error prompt if the reading authority is not available.
Optionally, the request sending module 110 includes:
a setting information acquisition unit for acquiring character string setting information;
and a second transmitting unit for transmitting the information inquiry request based on the character string setting information using the access token.
Optionally, the method further comprises:
the filtering module is used for filtering the type of the intranet safety information to obtain target intranet safety information;
and the BloodHound visual display module is used for visually displaying the security information of the target intranet by using a BloodHound tool.
In the following, the electronic device provided in the embodiment of the present application is introduced, and the electronic device described below and the intranet security information display method described above may be referred to correspondingly.
Referring to fig. 4, fig. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present disclosure. Wherein the electronic device 400 may include a processor 401 and a memory 402, and may further include one or more of a multimedia component 403, an information input/information output (I/O) interface 404, and a communication component 405.
The processor 401 is configured to control the overall operation of the electronic device 400, so as to complete all or part of the steps in the intranet security information display method; the memory 402 is used to store various types of data to support operation at the electronic device 400, such data may include, for example, instructions for any application or method operating on the electronic device 400 and application-related data. The Memory 402 may be implemented by any type or combination of volatile and non-volatile Memory devices, such as one or more of Static Random Access Memory (SRAM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read-Only Memory (EPROM), Programmable Read-Only Memory (PROM), Read-Only Memory (ROM), magnetic Memory, flash Memory, magnetic or optical disk.
The multimedia components 403 may include a screen and an audio component. Wherein the screen may be, for example, a touch screen and the audio component is used for outputting and/or inputting audio signals. For example, the audio component may include a microphone for receiving external audio signals. The received audio signal may further be stored in the memory 402 or transmitted through the communication component 405. The audio assembly also includes at least one speaker for outputting audio signals. The I/O interface 404 provides an interface between the processor 401 and other interface modules, such as a keyboard, mouse, buttons, etc. These buttons may be virtual buttons or physical buttons. The communication component 405 is used for wired or wireless communication between the electronic device 400 and other devices. Wireless Communication, such as Wi-Fi, bluetooth, Near Field Communication (NFC), 2G, 3G, or 4G, or a combination of one or more of them, so that the corresponding Communication component 405 may include: Wi-Fi part, Bluetooth part, NFC part.
The electronic Device 400 may be implemented by one or more Application Specific Integrated Circuits (ASICs), Digital Signal Processors (DSPs), Digital Signal Processing Devices (DSPDs), Programmable Logic Devices (PLDs), Field Programmable Gate Arrays (FPGAs), controllers, microcontrollers, microprocessors or other electronic components, and is configured to perform the intranet safety information display method according to the above embodiments.
The computer-readable storage medium provided in the embodiments of the present application is introduced below, and the computer-readable storage medium described below and the intranet security information display method described above may be referred to in correspondence with each other.
The application also provides a computer readable storage medium, wherein a computer program is stored on the computer readable storage medium, and the computer program is executed by a processor to realize the steps of the intranet security information display method.
The computer-readable storage medium may include: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The embodiments are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same or similar parts among the embodiments are referred to each other. The device disclosed by the embodiment corresponds to the method disclosed by the embodiment, so that the description is simple, and the relevant points can be referred to the method part for description.
Those of skill would further appreciate that the various illustrative components and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both, and that the various illustrative components and steps have been described above generally in terms of their functionality in order to clearly illustrate this interchangeability of hardware and software. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
The steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in Random Access Memory (RAM), memory, Read Only Memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.
Finally, it should also be noted that, herein, relationships such as first and second, etc., are intended only to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms include, or any other variation is intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus.
The principle and the implementation of the present application are explained herein by applying specific examples, and the above description of the embodiments is only used to help understand the method and the core idea of the present application; meanwhile, for a person skilled in the art, according to the idea of the present application, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present application.
Claims (10)
1. An intranet security information display method is characterized by comprising the following steps:
acquiring an access token, and sending an information query request by using the access token;
acquiring intranet safety information responding to the information query request;
and visually displaying the intranet safety information by using a visual interface generated based on a graph traversal language.
2. The method according to claim 1, wherein visually displaying the intranet security information using a visual interface generated based on a graph traversal language comprises:
carrying out format conversion processing on the intranet safety information by using the visual interface to obtain a graphic object;
and visually outputting the graphic object.
3. The intranet safety information display method according to claim 2, further comprising:
acquiring configuration information, and performing visual setting by using the configuration information;
correspondingly, the visually outputting the graphic object comprises:
visually outputting the image object based on the visualization setting.
4. The intranet security information presentation method according to claim 1, wherein the obtaining of the access token comprises:
sending a registration request for registering an application;
an application ID in response to the registration request is acquired, and the application degree ID is determined as the access token.
5. The intranet security information presentation method according to claim 1, wherein the sending of the information query request by using the access token includes:
judging whether the reading authority is available;
if the access token has the reading permission, the information query request is sent by using the access token;
and if the reading authority is not available, outputting an error prompt.
6. The intranet security information presentation method according to claim 1, wherein the sending of the information query request by using the access token includes:
acquiring character string setting information;
and sending the information query request based on the character string setting information by using the access token.
7. The intranet safety information display method according to claim 1, further comprising:
performing type filtering on the intranet safety information to obtain target intranet safety information;
and visually displaying the target intranet safety information by using a BloodHound tool.
8. The utility model provides an intranet safety information display device which characterized in that includes:
the request sending module is used for acquiring an access token and sending an information query request by using the access token;
the information acquisition module is used for acquiring intranet safety information responding to the information inquiry request;
and the visual display module is used for visually displaying the intranet safety information by utilizing a visual interface generated based on a graph traversal language.
9. An electronic device comprising a memory and a processor, wherein:
the memory is used for storing a computer program;
the processor is configured to execute the computer program to implement the intranet security information display method according to any one of claims 1 to 7.
10. A computer-readable storage medium storing a computer program, wherein the computer program, when executed by a processor, implements the intranet security information presentation method according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011374469.3A CN112383562A (en) | 2020-11-30 | 2020-11-30 | Intranet safety information display method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011374469.3A CN112383562A (en) | 2020-11-30 | 2020-11-30 | Intranet safety information display method and device, electronic equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112383562A true CN112383562A (en) | 2021-02-19 |
Family
ID=74588955
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011374469.3A Pending CN112383562A (en) | 2020-11-30 | 2020-11-30 | Intranet safety information display method and device, electronic equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112383562A (en) |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106656959A (en) * | 2016-09-28 | 2017-05-10 | 腾讯科技（深圳）有限公司 | Access request regulation and control method and device |
| CN106657010A (en) * | 2016-11-16 | 2017-05-10 | 东软集团股份有限公司 | Data access method, device and system |
| CN107094158A (en) * | 2017-06-27 | 2017-08-25 | 四维创智（北京）科技发展有限公司 | The fragile analysis system of one kind automation intranet security |
| CN107426171A (en) * | 2017-06-02 | 2017-12-01 | 国家电网公司 | The safety protecting method and device of power information Intranet |
| US20180007087A1 (en) * | 2016-06-30 | 2018-01-04 | Microsoft Technology Licensing, Llc. | Detecting attacks using compromised credentials via internal network monitoring |
| CN110647540A (en) * | 2019-08-13 | 2020-01-03 | 平安普惠企业管理有限公司 | Business data query method and device, computer equipment and storage medium |
| CN111538777A (en) * | 2020-03-20 | 2020-08-14 | 贵州电网有限责任公司 | Enterprise intranet information safety visual display management platform |
-
2020
- 2020-11-30 CN CN202011374469.3A patent/CN112383562A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20180007087A1 (en) * | 2016-06-30 | 2018-01-04 | Microsoft Technology Licensing, Llc. | Detecting attacks using compromised credentials via internal network monitoring |
| CN106656959A (en) * | 2016-09-28 | 2017-05-10 | 腾讯科技（深圳）有限公司 | Access request regulation and control method and device |
| CN106657010A (en) * | 2016-11-16 | 2017-05-10 | 东软集团股份有限公司 | Data access method, device and system |
| CN107426171A (en) * | 2017-06-02 | 2017-12-01 | 国家电网公司 | The safety protecting method and device of power information Intranet |
| CN107094158A (en) * | 2017-06-27 | 2017-08-25 | 四维创智（北京）科技发展有限公司 | The fragile analysis system of one kind automation intranet security |
| CN110647540A (en) * | 2019-08-13 | 2020-01-03 | 平安普惠企业管理有限公司 | Business data query method and device, computer equipment and storage medium |
| CN111538777A (en) * | 2020-03-20 | 2020-08-14 | 贵州电网有限责任公司 | Enterprise intranet information safety visual display management platform |
Non-Patent Citations (2)
| Title |
|---|
| 袁燕妮: "《NoSQL数据库技术》" * |
| 谢锦彪: "内网安全态势感知技术的研究与实现", 《中国优秀硕士学位论文全文数据库(电子期刊)》 * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11036696B2 (en) | Resource allocation for database provisioning | |
| EP3069250B1 (en) | User support experience with automatically generated virtual environment | |
| EP2771803B1 (en) | File fetch from a remote client device | |
| JP2021524090A (en) | Selectively provide mutual transport layer security using alternate server names | |
| CN108427550B (en) | Web service generation method, device and equipment | |
| US9280665B2 (en) | Fast and accurate identification of message-based API calls in application binaries | |
| JP2017503288A (en) | Automatic SDK acceptance | |
| US10754717B2 (en) | Fast and accurate identification of message-based API calls in application binaries | |
| JP2021503118A (en) | Systems and methods for integrating cloud applications into cloud service broker platforms using the automatic universal connector package | |
| US20180276058A1 (en) | In-Product Notifications Targeting Specific Users Selected Via Data Analysis | |
| US20140278812A1 (en) | Diagnostics storage within a multi-tenant data center | |
| US20200349238A1 (en) | Automatically detecting misuse of licensed software | |
| US11882154B2 (en) | Template representation of security resources | |
| US10841342B2 (en) | Data driven user interfaces for device management | |
| KR20140099109A (en) | System and method for supporting evaluation of application service by using multiple clouds | |
| US10303343B1 (en) | Data driven user interfaces for device management | |
| CN112583891B (en) | Interface document acquisition method and device and server | |
| CN112383562A (en) | Intranet safety information display method and device, electronic equipment and storage medium | |
| WO2024105753A1 (en) | Information processing apparatus, information processing method, and information processing program | |
| US20220237250A1 (en) | Smart directory search | |
| US10148590B2 (en) | Method and system for dynamically unblocking customers in critical workflows using pre-defined unlock codes | |
| CN117792704A (en) | Website access method and device, electronic equipment and computer readable medium | |
| CN117234464A (en) | Multi-platform charging component service management method and device, electronic equipment and medium | |
| JP5975910B2 (en) | Data processing apparatus, data processing method, data processing program, and cooperative business system | |
| Rois Siso | Indoor location-Platform for developers and mobile applications |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20210219 |