CN102088377B - Man-machine correspondence method and device for assets management - Google Patents

Man-machine correspondence method and device for assets management Download PDF

Info

Publication number
CN102088377B
CN102088377B CN201110000543XA CN201110000543A CN102088377B CN 102088377 B CN102088377 B CN 102088377B CN 201110000543X A CN201110000543X A CN 201110000543XA CN 201110000543 A CN201110000543 A CN 201110000543A CN 102088377 B CN102088377 B CN 102088377B
Authority
CN
China
Prior art keywords
address
man
http protocol
protocol message
account information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201110000543XA
Other languages
Chinese (zh)
Other versions
CN102088377A (en
Inventor
吕彦升
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen easy to listen to the Department of information technology Limited by Share Ltd
Original Assignee
SHENZHEN E-LINK INFORMATION TECHNOLOGY Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by SHENZHEN E-LINK INFORMATION TECHNOLOGY Co Ltd filed Critical SHENZHEN E-LINK INFORMATION TECHNOLOGY Co Ltd
Priority to CN201110000543XA priority Critical patent/CN102088377B/en
Publication of CN102088377A publication Critical patent/CN102088377A/en
Application granted granted Critical
Publication of CN102088377B publication Critical patent/CN102088377B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a man-machine correspondence method and device for assets management, which relate to the field of assets management in the Internet technology. The method comprises the following steps of: monitoring all network communication messages by using a network sniffing program, acquiring Internet protocol (IP) addresses and account number information contained in a hypertext transport protocol (http) message and resolving the corresponding relation between the account number information and the IP addresses so as to obtain sequence pairs of the account number information and the IP address; acquiring the IP address, a media access control (MAC) address and a host computer name of an online host computer; and performing IP association processing on the resolved corresponding relation between the resolved account number information and the IP addresses as well as the acquired IP address, the MAC address and the host computer name of the online host computer to obtain complete man-machine correspondence information for realizing man-machine correspondence. The invention has the advantages of easiness for deployment, convenience for implementation, workload reduction and comprehension and high accuracy for acquiring asset properties.

Description

A kind of man-machine corresponding method and device that is used for asset management
Technical field
The present invention relates to the asset management field in the Internet technology, in particular a kind of man-machine corresponding method and device that is used for asset management.
Background technology
The software of now a lot of security services; Which platform computer outburst after the security incident outburst, will follow the tracks of is; Even need directly track the people and carry out security incident and handle, the behavior of following the trail of computer or person liable's positioning service of incident promptly are provided, this just relates to the assets module.Popular resource management software on the market; Though can find the PC assets automatically, can not be automatically and the people bind, the man-machine binding of some resource management softwares is nearly all done through manual; Like this for the system manager; Just not saying workload is big, owing to IP dynamic change reason, also be difficult to accomplish IP pairing be that people.
Though some man-machine automatic correlation methods have appearred in the prior art, the method more complicated, and assets collect incomplete yet, and have following shortcoming:
1. if manual work realizes that workload is very big, and because the IP dynamic change, it is extremely difficult to safeguard, so carry out unlikely;
2. from man-machine automatic correlation method, containing much information of collection deals with more complicated, and deployment and enforcement are all pretty troublesome;
3. the information of collecting from some security incidents or network behavior; The assets information attribute of collecting is incomplete; Can only collect account number and IP like isa, and data volume is very big, for some big enterprises; One day possibly be exactly the data of several G, and the data processing of magnanimity level gets up to need good hardware to support like this;
4. if having only IP and account information; Track people ground angle from security incident and say that most of security incident all has MAC Address or host name, if come association more accurately also simple a bit with MAC Address or host name; If come related with IP; Because IP dynamic change cause must cut into enough short ability association to the time period accurately, deals with more complicated like this; And there is error the untimely or time that the security incident that has provides, also can cause not calculating accurately really.
Therefore, prior art awaits to improve and development.
Summary of the invention
The technical problem that the present invention will solve is, to the above-mentioned defective of prior art, a kind of man-machine corresponding method and device that is used for asset management is provided, and it disposes simply, realizes conveniently, reduced workload, Asset Attributes obtains comprehensively and accuracy rate is high.
The technical scheme that technical solution problem of the present invention is adopted is following:
A kind of man-machine corresponding method that is used for asset management wherein, comprises step:
A1, startup Network Sniffing program are monitored the all-network communication information, and are got into steps A 2;
A2, judge whether to listen to the http protocol message, when being, get into steps A 3; Otherwise other non-http protocol message is abandoned;
A3, judge that whether destination address in this http protocol message is the IP address that needs the server that number of the account lands, and gets into steps A 4, otherwise abandons this http protocol message when being;
A4, judge in this http protocol message whether comprise account information, when being, parse the corresponding relation of account information and IP address, the sequence that obtains account information and IP address is right, otherwise abandons this http protocol message.
The said man-machine corresponding method that is used for asset management, wherein, it also comprises step:
B1, startup scanning imaging system scan online main frame;
B2, obtain IP address, MAC Address and the host name of online main frame.
The said man-machine corresponding method that is used for asset management, wherein, it also comprises step:
D, with the corresponding relation of above-mentioned account information that parses and IP address, and IP address, MAC Address and the host name of the online main frame that obtains are obtained complete man-machine corresponding informance through the IP association process, realize man-machine correspondence.
The said man-machine corresponding method that is used for asset management, wherein, said complete man-machine corresponding informance comprises: account information, IP address, MAC Address and host name.
The said man-machine corresponding method that is used for asset management, wherein, said step B1 also comprises: fire compartment wall is set allows the visit of Netbios message, and the snmp visit that is provided with the three-tier switch of user side allows to open.
A kind of man-machine corresponding intrument that is used for asset management wherein, comprising:
Monitor module, be used to start the Network Sniffing program, monitor the all-network communication information;
First judge module is used to judge whether to listen to the http protocol message;
Second judge module is used for when listening to the http protocol message, judges that whether destination address in this http protocol message is the IP address that needs the server that number of the account lands;
The 3rd judge module, be used for when the destination address of judging the http protocol message be when needing the IP address of the server that number of the account lands, to judge in this http protocol message whether comprise account information;
Parsing module is used for when judging that this http protocol message comprises account information, parsing the corresponding relation of account information and IP address, and the sequence that obtains account information and IP address is right.
The said man-machine corresponding intrument that is used for asset management, wherein, it also comprises:
Scan module is used to start scanning imaging system and scans online main frame;
Acquisition module is used to obtain IP address, MAC Address and the host name of online main frame.
The said man-machine corresponding intrument that is used for asset management, wherein, it also comprises:
Relating module is used for the corresponding relation with above-mentioned account information that parses and IP address, and IP address, MAC Address and the host name of the online main frame that obtains, and obtains complete man-machine corresponding informance through the IP association process.
The said man-machine corresponding intrument that is used for asset management, wherein, said complete man-machine corresponding informance comprises: account information, IP address, MAC Address and host name.
The said man-machine corresponding intrument that is used for asset management, wherein, it also comprises:
Module is set, is used to be provided with fire compartment wall and allows the visit of Netbios message, and the snmp visit that is provided with the three-tier switch of user side allows to open.
Man-machine corresponding method and the device that is used for asset management provided by the present invention; Owing to adopted startup Network Sniffing program; Monitor the all-network communication information; Obtain the IP address and the account information that comprise in the http protocol message, and parse the corresponding relation of account information and IP address, the sequence that obtains account information and IP address is right; And IP address, MAC Address and the host name of obtaining online main frame; And with the corresponding relation of above-mentioned account information that parses and IP address, and IP address, MAC Address and the host name of the online main frame that obtains, obtain complete man-machine corresponding informance through the IP association process, realize man-machine correspondence; Have following advantage:
1) it is convenient, to dispose simply, realize
2), original relatively man-machine matching process, method of the present invention is simpler, visits when filtering Direct Filtration come out IP address and account number smelling; And original matching process will be by means of more security event data or internet behavior data; Like the log information in isa (Microsoft Internet Security and Acceleration is a secure internet connection management software of Microsoft) data and territory, and these data volumes are especially big; As 10,000 multiple computers; The data volume that isa produced in one day just reaches 8 G; Will be directly extract these data from the isa server and process, greatly much less data volume and affects to the isa server performance; The daily record amount in same territory is also very big, and also need spend long time with the log information in program extraction territory. and new method does not spend the technology that is adopted when considering to handle isa that kind mass data.;
What 3), Asset Attributes provided is more complete; The sequence < number of the account, IP address, MAC Address, host name>that has comprised a four-tuple; And original automatic matching method can only be taken IP and number of the account sometimes, and it is simpler, more accurate that method of the present invention like this is that security incident tracks the person liable; Be the dynamic change because of IP, we can only find the assets person liable according to host name or MAC Address;
4), the real-time of assets scanning, matched data is more accurate, and processing speed is fast;
5), old man-machine matching process depends on multiple network resources and accomplishes the assets method, and the man-machine corresponding method of Network Sniffing is as long as rely on a kind of application service system that the user often lands.
Description of drawings
Fig. 1 is the man-machine corresponding method flow chart that is used for asset management of the embodiment of the invention.
Fig. 2 is that the man-machine corresponding method Network Sniffing that is used for asset management of the embodiment of the invention is monitored http protocol message structural representation.
Fig. 3 is the man-machine corresponding method scanning sketch map that is used for asset management of the embodiment of the invention.
The man-machine corresponding intrument theory diagram that is used for asset management of first embodiment of the invention among Fig. 4.
Fig. 5 is the man-machine corresponding intrument theory diagram that is used for asset management of second embodiment of the invention.
Embodiment
A kind of man-machine corresponding method and device that is used for asset management provided by the present invention, clearer, clear and definite for making the object of the invention, technical scheme and advantage, below develop simultaneously embodiment to further explain of the present invention with reference to accompanying drawing.Should be appreciated that specific embodiment described herein only in order to explanation the present invention, and be not used in qualification the present invention.
A kind of man-machine corresponding method that is used for asset management that the embodiment of the invention provides, as shown in Figure 1, mainly may further comprise the steps:
A1, startup Network Sniffing program, listens for network communication information.
For example, place the network equipment device promiscuous mode to realize the listens for network communication information through the Network Sniffing program; A so-called promiscuous mode i.e. machine can receive all data flow through it; No matter and whether its destination address is itself; Other compunication information in so just can listens for network is mainly monitored the http protocol information here.
The Network Sniffing program, it can be used for eavesdropping numerous information that computer is produced on network, can eavesdrop the data that computer program sends and receives on network, is used for being received in the information of transmission over networks.
What a lot of computer networks adopted is " shared medium ".That is to say, needn't interrupt his communication, and dispose special circuit, the Network Sniffing program is installed again, almost can on any network that is connecting, directly intercept the computer network data in the same mask scope.This eavesdropping mode is " based on the spy of smelling of promiscuous mode ".
Data transmission of Ethernet is based on " sharing " principle: the computer in all same local network scopes receives identical packet jointly.This means that the direct communication of computer all is transparent visible.Exactly because such reason, Ethernet card have all been constructed hardware " filter ", this filter will neglect all and oneself irrelevant network information.In fact be to have neglected the information of closing with the self MAC mail returned on ground of incorrect address.Sniffers has utilized these characteristics just, and its network interface card is set to " promiscuous mode ".Therefore, sniffers just can receive the network data information in the whole Ethernet.
A2, judge whether to listen to the http protocol message, when being, get into steps A 3; Otherwise other non-http protocol message is abandoned.Wherein, http (HyperTextTransferProtocol) is the abbreviation of HTTP.The http agreement has adopted the request model.User end to server sends a request; The message structure that is similar to MIME (Multipurpose Internet Mail Extensions " multi-functional Internet mail expands service, is a kind of multi purpose internet mail extensions) that request header comprises method, URI, the protocol version of request and comprises request modifier, customer information and content.As response, content corresponding comprises the version of messaging protocol to server with a statusline, and success or error coded add and comprise server info, entity metamessage and possible entity content.Usually http message comprises that client computer is to the request message of server and the server response message to client computer).
A3, judge that whether destination address in this http protocol message is the IP address that needs the server that number of the account lands, and gets into steps A 4, otherwise gets into steps A 5 when being;
A4, judge in this http protocol message whether comprise account information, when being, get into steps A 6, otherwise get into steps A 5;
A5, abandon this http protocol message, and finish;
A6, parse the corresponding relation of account information and IP address, the sequence that obtains account information and IP address is right.
Promptly in the application system server commonly used that needs number of the account to land (like mail server; Perhaps OA server) local area network (LAN) deployed Network Sniffing program is carried out the http protocol listening; When listening to the http protocol message, get into steps A 3, then abandon automatically when listening to the non-http protocol message that is.Find number of the account (landing) information through monitoring packet capturing, parse remote ip address and number of the account, like this, just had the sequence of number of the account and IP address right.
Simultaneously, the man-machine corresponding method that is used for asset management of the embodiment of the invention, as shown in Figure 1, it also comprises step:
Step B1, startup scanning imaging system scan online main frame;
Step B2, obtain IP address, MAC Address and the host name of online main frame.
For example, utilize quick scanning technique, scan the main frame of current online out; Obtain the IP address; MAC Address and host name when wherein obtaining host name, need be provided with fire compartment wall and allow the visit of Netbios message; The scanning of inter-network section need allow the snmp visit to open on the three-tier switch near user's one side.
Wherein, Netbios is an agreement, and the main effect of Netbios agreement is for network and other specific functions are provided to local area network (LAN), and it is the Netbios name that the NETBIOS message has carried host name; Be corresponding IP address according to the Netbios name analysis again, realize information communication.
And the predecessor of snmp (Simple Network Management Protocol, Simple Network Management Protocol) is simple gateway monitoring protocol (SGMP), is used for communication line is managed.
Step D, with the corresponding relation of above-mentioned account information that parses and IP address, and IP address, MAC Address and the host name of the online main frame that obtains are obtained complete man-machine corresponding informance through the IP association process, realize man-machine correspondence.Said complete man-machine corresponding informance comprises: account information, IP address, MAC Address and host name.Utilizing the IP association to obtain quaternary sequence set < number of the account, IP address, MAC Address, host name>is exactly the desired data of the present invention, thereby has realized man-machine corresponding method of the present invention.Finish then.
Below will explain further details to the present invention through a concrete application implementation example:
The first step, come out the information analysis that lands number of the account through the Network Sniffing program of grabbing, as shown in Figure 2, in find out number of the account lvys corresponding IP be 10.0.0.148;
Second step, as shown in Figure 3; Can obtain IP through scanning technique is corresponding host name and MAC Address of 10.0.0.148; The MAC Address corresponding like 10.0.0.148 is: 00-24-21-72-46-EF, corresponding main frame is by name: WIN-MAC3B7YQTZ8V.
The 3rd step, with the corresponding relation of above-mentioned account information that parses and IP address; And IP address, MAC Address and the host name of the online main frame that obtains; Obtain complete man-machine corresponding informance through the IP association process,, obtain the corresponding four-tuple of number of the account lvys as according to the first step and second step
Promptly < number of the account, IP address, MAC Address, host name>sequence is output as:
<lvys?,10.0.0.148、00-24-21-72-46-EF,WIN-MAC3B7YQTZ8V>
To realize man-machine correspondence.
Therefore, a kind of man-machine corresponding method that is used for asset management of the embodiment of the invention, it disposes simply, realizes conveniently, has reduced workload, Asset Attributes obtains comprehensively and accuracy rate is high.
Based on a kind of man-machine corresponding method that is used for asset management of the foregoing description, the embodiment of the invention also provides a kind of man-machine corresponding intrument that is used for asset management, and is as shown in Figure 4, and the man-machine corresponding intrument that is used for asset management of first embodiment comprises:
Monitor module 410, be used to start the Network Sniffing program, monitor the all-network communication information;
First judge module 420 is used to judge whether to listen to the http protocol message;
Second judge module 430 is used for when listening to the http protocol message, judges that whether destination address in this http protocol message is the IP address that needs the server that number of the account lands;
The 3rd judge module 440, be used for when the destination address of judging the http protocol message be when needing the IP address of the server that number of the account lands, to judge in this http protocol message whether comprise account information;
Parsing module 450 is used for when judging that this http protocol message comprises account information, parsing the corresponding relation of account information and IP address, and the sequence that obtains account information and IP address is right.
Scan module 460 is used to start scanning imaging system and scans online main frame;
Acquisition module 470 is used to obtain IP address, MAC Address and the host name of online main frame.
Relating module 480 is used for the corresponding relation with above-mentioned account information that parses and IP address, and IP address, MAC Address and the host name of the online main frame that obtains, and obtains complete man-machine corresponding informance through the IP association process.Wherein, said complete man-machine corresponding informance comprises: account information, IP address, MAC Address and host name.
The man-machine corresponding intrument that is used for asset management of second embodiment; As shown in Figure 5; The man-machine corresponding intrument structural principle that is used for asset management of itself and first embodiment is basic identical, so-called different be second embodiment the man-machine corresponding intrument that is used for asset management its also comprise:
Module 490 is set, is used to be provided with fire compartment wall and allows the visit of Netbios message, and the snmp visit that is provided with the three-tier switch of user side allows to open.
In sum; Man-machine corresponding method and the device that is used for asset management provided by the present invention; Owing to adopted startup Network Sniffing program, monitor the all-network communication information, obtain the IP address and the account information that comprise in the http protocol message; And parsing the corresponding relation of account information and IP address, the sequence that obtains account information and IP address is right; And IP address, MAC Address and the host name of obtaining online main frame; And with the corresponding relation of above-mentioned account information that parses and IP address, and IP address, MAC Address and the host name of the online main frame that obtains, obtain complete man-machine corresponding informance through the IP association process, realize man-machine correspondence; Have following advantage:
1) it is convenient, to dispose simply, realize;
2), original relatively man-machine matching process, method of the present invention is simpler, visits when filtering Direct Filtration come out IP address and account number smelling; And original matching process will be by means of more security event data or internet behavior data, and like the log information in isa data and territory, and these data volumes are especially big; As 10,000 multiple computers; The data volume that isa produced in one day just reaches 8 G; Will be directly extract these data from the isa server and process, greatly much less data volume and affects to the isa server performance; The daily record amount in same territory is also very big, and also need spend long time with the log information in program extraction territory. and new method does not spend the technology that is adopted when considering to handle isa that kind mass data.;
What 3), Asset Attributes provided is more complete; The sequence < number of the account, IP address, MAC Address, host name>that has comprised a four-tuple; And original automatic matching method can only be taken IP and number of the account sometimes, and it is simpler, more accurate that method of the present invention like this is that security incident tracks the person liable; Be the dynamic change because of IP, we can only find the assets person liable according to host name or MAC Address;
4), the real-time of assets scanning, matched data is more accurate, and processing speed is fast;
5), old man-machine matching process depends on multiple network resources and accomplishes the assets method, and the man-machine corresponding method of Network Sniffing is as long as rely on a kind of application service system that the user often lands.
Should be understood that application of the present invention is not limited to above-mentioned giving an example, concerning those of ordinary skills, can improve or conversion that all these improvement and conversion all should belong to the protection range of accompanying claims of the present invention according to above-mentioned explanation.

Claims (4)

1. a man-machine corresponding method that is used for asset management is characterized in that, comprises step:
A1, startup Network Sniffing program are monitored the all-network communication information, and are got into steps A 2;
A2, judge whether to listen to the http protocol message, when being, get into steps A 3; Otherwise other non-http protocol message is abandoned;
A3, judge that whether destination address in this http protocol message is the IP address that needs the server that number of the account lands, and gets into steps A 4, otherwise abandons this http protocol message when being;
A4, judge in this http protocol message whether comprise account information, when being, parse the corresponding relation of the IP address of account information and Terminal Server Client, the sequence of IP address that obtains account information and Terminal Server Client is right, otherwise abandons this http protocol message;
B1, startup scanning imaging system scan online main frame;
B2, obtain IP address, MAC Address and the host name of online main frame;
D, with the corresponding relation of the IP address of above-mentioned account information that parses and Terminal Server Client, and IP address, MAC Address and the host name of the online main frame that obtains are obtained complete man-machine corresponding informance through the IP association process, realize man-machine correspondence;
Wherein, said complete man-machine corresponding informance comprises: account information, IP address, MAC Address and host name.
2. according to the said man-machine corresponding method that is used for asset management of claim 1, it is characterized in that said step B1 also comprises: fire compartment wall is set allows the visit of Netbios message, and the snmp visit that is provided with the three-tier switch of user side allows to open.
3. a man-machine corresponding intrument that is used for asset management is characterized in that, comprising:
Monitor module, be used to start the Network Sniffing program, monitor the all-network communication information;
First judge module is used to judge whether to listen to the http protocol message;
Second judge module is used for when listening to the http protocol message, judges that whether destination address in this http protocol message is the IP address that needs the server that number of the account lands;
The 3rd judge module, be used for when the destination address of judging the http protocol message be when needing the IP address of the server that number of the account lands, to judge in this http protocol message whether comprise account information;
Parsing module is used for when judging that this http protocol message comprises account information, parsing the corresponding relation of the IP address of account information and Terminal Server Client, and the sequence of IP address that obtains account information and Terminal Server Client is right;
Scan module is used to start scanning imaging system and scans online main frame;
Acquisition module is used to obtain IP address, MAC Address and the host name of online main frame;
Relating module is used for the corresponding relation with the IP address of above-mentioned account information that parses and Terminal Server Client, and IP address, MAC Address and the host name of the online main frame that obtains, and obtains complete man-machine corresponding informance through the IP association process;
Wherein, said complete man-machine corresponding informance comprises: account information, IP address, MAC Address and host name.
4. according to the said man-machine corresponding intrument that is used for asset management of claim 3, it is characterized in that it also comprises:
Module is set, is used to be provided with fire compartment wall and allows the visit of Netbios message, and the snmp visit that is provided with the three-tier switch of user side allows to open.
CN201110000543XA 2011-01-04 2011-01-04 Man-machine correspondence method and device for assets management Active CN102088377B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201110000543XA CN102088377B (en) 2011-01-04 2011-01-04 Man-machine correspondence method and device for assets management

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110000543XA CN102088377B (en) 2011-01-04 2011-01-04 Man-machine correspondence method and device for assets management

Publications (2)

Publication Number Publication Date
CN102088377A CN102088377A (en) 2011-06-08
CN102088377B true CN102088377B (en) 2012-05-23

Family

ID=44099998

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110000543XA Active CN102088377B (en) 2011-01-04 2011-01-04 Man-machine correspondence method and device for assets management

Country Status (1)

Country Link
CN (1) CN102088377B (en)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102281284A (en) * 2011-06-16 2011-12-14 佘培嘉 Novel communication control mode of server of internet of things
WO2013106951A1 (en) * 2012-01-21 2013-07-25 博泰雄森(北京)网络科技有限公司 Method and system for identifying user identity according to specific information
CN103312530B (en) * 2012-03-13 2017-02-01 百度在线网络技术(北京)有限公司 Method and system for correspondingly counting on-line server and rack position, and counting platform
CN102611597A (en) * 2012-04-10 2012-07-25 中山爱科数字家庭产业孵化基地有限公司 Method for accessing internet through broadband in free of inputting account and password in different family environments
CN103037415B (en) * 2012-12-12 2016-07-06 深信服网络科技(深圳)有限公司 Network analysis method and system
CN103986600B (en) * 2014-05-14 2018-12-04 上海上讯信息技术股份有限公司 One kind is found automatically based on multi-protocols business network and filter method, system
CN105450442B (en) * 2015-11-06 2019-02-15 广东电网有限责任公司电力科学研究院 A kind of network topology investigation method and its system
CN113037882B (en) * 2016-11-22 2022-12-27 华为数字技术(苏州)有限公司 Method for acquiring additional information of host and proxy equipment
CN108295477B (en) * 2018-01-26 2021-10-15 珠海金山网络游戏科技有限公司 Game account safety detection method, system and device based on big data
CN109783719B (en) * 2018-12-29 2021-04-13 奇安信科技集团股份有限公司 Asset data searching method, device, equipment and medium based on unit name

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1937499A (en) * 2006-10-13 2007-03-28 清华大学 Domainname-based unified identification mark and authentication method

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100521602C (en) * 2006-10-13 2009-07-29 清华大学 Credible P2P e-mail transmission method based on true address
US8369312B2 (en) * 2007-10-03 2013-02-05 Verizon Patent And Licensing Inc. Method and system for retrieving log messages from customer premise equipment

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1937499A (en) * 2006-10-13 2007-03-28 清华大学 Domainname-based unified identification mark and authentication method

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
林廷劈.网络嗅探行为利弊分析.《三明学院学报》.2008,第25卷(第2期), *
王晓薇.网络嗅探技术.《微计算机信息》.2003,第19卷(第11期), *

Also Published As

Publication number Publication date
CN102088377A (en) 2011-06-08

Similar Documents

Publication Publication Date Title
CN102088377B (en) Man-machine correspondence method and device for assets management
US20130191890A1 (en) Method and system for user identity recognition based on specific information
CN114584401B (en) Tracing system and method for large-scale network attack
Dainotti et al. Estimating internet address space usage through passive measurements
US20050027806A1 (en) Network asset tracker for identifying users of networked computers
CN102082690B (en) Passive finding equipment and method of network topology
US20090168645A1 (en) Automated Network Congestion and Trouble Locator and Corrector
CN107579874B (en) Method and device for detecting data collection missing report of flow collection equipment
CN101854360A (en) Device and method for tracing to the source of mobile subscriber cellphone number according to IP (Internet Protocol) address
CN108809769B (en) Method for detecting IPv6 liveness and electronic equipment
WO2016070633A1 (en) Network log generation method and device
CN110659481A (en) Vulnerability scanning method based on agent
CN102164048B (en) Data stream optimization device and method for realizing multi-ISP (internet service provider) access in local area network
CN109639767A (en) A kind of Service Gateway data processing method, device, equipment
CN106790073B (en) Blocking method and device for malicious attack of Web server and firewall
CN113438332B (en) DoH service identification method and device
CN102271331B (en) Method and system for detecting reliability of service provider (SP) site
FR2849559A1 (en) Data path characteristics analyzing method for data transmission network, involves executing analyzing program module based on actions of script file and parameters, where module requests predefined information
CN110572291A (en) System and method for realizing automatic framework identification function for distributed system
CN113098727A (en) Data packet detection processing method and device
CN106330981B (en) Network web site information collection method and device
CN107070908A (en) A kind of method of automatic detection personation gateway A RP deceptions
CN106936938A (en) Domain name analytic method and system
WO2017041648A1 (en) Method and device for processing application request
JP2010183214A (en) Apparatus, method and program for analysis of packet

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
PE01 Entry into force of the registration of the contract for pledge of patent right

Denomination of invention: Man-machine correspondence method and device for assets management

Effective date of registration: 20130608

Granted publication date: 20120523

Pledgee: Shenzhen high tech investment and financing Company limited by guarantee

Pledgor: Shenzhen E-Link Information Technology Co., Ltd.

Registration number: 2013990000360

PLDC Enforcement, change and cancellation of contracts on pledge of patent right or utility model
PC01 Cancellation of the registration of the contract for pledge of patent right

Date of cancellation: 20140610

Granted publication date: 20120523

Pledgee: Shenzhen high tech investment and financing Company limited by guarantee

Pledgor: Shenzhen E-Link Information Technology Co., Ltd.

Registration number: 2013990000360

PE01 Entry into force of the registration of the contract for pledge of patent right

Denomination of invention: Man-machine correspondence method and device for assets management

Effective date of registration: 20140611

Granted publication date: 20120523

Pledgee: Shenzhen high tech investment and financing Company limited by guarantee

Pledgor: Shenzhen E-Link Information Technology Co., Ltd.

Registration number: 2014990000456

PLDC Enforcement, change and cancellation of contracts on pledge of patent right or utility model
C56 Change in the name or address of the patentee
CP03 Change of name, title or address

Address after: 518057, 9, 911 and 912, a software building No. 910, hi tech center, Nanshan District hi tech Zone, Shenzhen, Guangdong

Patentee after: Shenzhen easy to listen to the Department of information technology Limited by Share Ltd

Address before: 518057 Guangdong city of Shenzhen province Nanshan District Gao Xin Road SKYWORTH C building block 1604

Patentee before: Shenzhen E-Link Information Technology Co., Ltd.

PC01 Cancellation of the registration of the contract for pledge of patent right

Date of cancellation: 20151117

Granted publication date: 20120523

Pledgee: Shenzhen high tech investment and financing Company limited by guarantee

Pledgor: Shenzhen easy to listen to the Department of information technology Limited by Share Ltd

Registration number: 2014990000456

PLDC Enforcement, change and cancellation of contracts on pledge of patent right or utility model
PM01 Change of the registration of the contract for pledge of patent right

Change date: 20151117

Registration number: 2014990000456

Pledgor after: Shenzhen easy to listen to the Department of information technology Limited by Share Ltd

Pledgor before: Shenzhen E-Link Information Technology Co., Ltd.

PE01 Entry into force of the registration of the contract for pledge of patent right

Denomination of invention: Man-machine correspondence method and device for assets management

Effective date of registration: 20151120

Granted publication date: 20120523

Pledgee: Shenzhen high tech investment and financing Company limited by guarantee

Pledgor: Shenzhen easy to listen to the Department of information technology Limited by Share Ltd

Registration number: 2015990001026

PLDC Enforcement, change and cancellation of contracts on pledge of patent right or utility model
PC01 Cancellation of the registration of the contract for pledge of patent right

Date of cancellation: 20170525

Granted publication date: 20120523

Pledgee: Shenzhen high tech investment and financing Company limited by guarantee

Pledgor: Shenzhen easy to listen to the Department of information technology Limited by Share Ltd

Registration number: 2015990001026