CN113704266A - Asset information processing method and device, electronic equipment and storage medium - Google Patents

Asset information processing method and device, electronic equipment and storage medium Download PDF

Info

Publication number
CN113704266A
CN113704266A CN202111015915.6A CN202111015915A CN113704266A CN 113704266 A CN113704266 A CN 113704266A CN 202111015915 A CN202111015915 A CN 202111015915A CN 113704266 A CN113704266 A CN 113704266A
Authority
CN
China
Prior art keywords
asset
information
reference data
equipment
asset information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202111015915.6A
Other languages
Chinese (zh)
Inventor
张佳
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sangfor Technologies Co Ltd
Original Assignee
Sangfor Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sangfor Technologies Co Ltd filed Critical Sangfor Technologies Co Ltd
Priority to CN202111015915.6A priority Critical patent/CN113704266A/en
Publication of CN113704266A publication Critical patent/CN113704266A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/22Indexing; Data structures therefor; Storage structures
    • G06F16/2291User-Defined Types; Storage management thereof
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/21Design, administration or maintenance of databases
    • G06F16/211Schema design and management
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/23Updating
    • G06F16/2358Change logging, detection, and notification

Abstract

The embodiment of the application provides an asset information processing method, an asset information processing device, electronic equipment and a storage medium, wherein the method comprises the following steps: acquiring reference data in the asset information of a plurality of devices; determining at least one piece of equipment asset information to be combined in the plurality of pieces of equipment asset information according to the priority information of each piece of equipment asset information; carrying out data combination on the reference data and asset attribute information in at least one piece of equipment asset information to be combined to obtain an updating result of the reference data; and determining the asset information of the target equipment according to the updating result of the reference data. Based on the asset information processing method provided by the application, the accuracy of asset attribute information identification can be improved.

Description

Asset information processing method and device, electronic equipment and storage medium
Technical Field
The embodiment of the application relates to the technical field of cloud computing, in particular to an asset information processing method and device, electronic equipment and a computer storage medium.
Background
Asset attribute information is the basis for Asset Identification (Asset Identification) of network devices, and many services depend on the accuracy of Asset attribute information Identification of network devices, for example, security detection of network devices. The asset information of the network device may be from different types of network security devices, and the field contents of the asset attribute information in the asset information of the network device identified by the different network security devices are not consistent.
In the related art, when asset information is processed, for network device asset information identified by different network security devices, the network device asset information in a Database (Database) is directly covered according to the network device asset information which is newly acquired by the network security device, and asset attribute information of the same asset identifier in the Database is mutually covered, so that the asset attribute information in the network device asset information is frequently changed, and the accuracy of the network device asset information is influenced. Therefore, how to improve the accuracy of asset attribute information identification becomes an important problem to be solved urgently.
Disclosure of Invention
The embodiment of the application provides an asset information processing method, an asset information processing device, electronic equipment and a computer storage medium, and the accuracy of asset attribute information identification can be improved.
An asset information processing method provided by an embodiment of the present application includes:
acquiring reference data in the asset information of a plurality of devices; determining at least one piece of equipment asset information to be merged in the plurality of pieces of equipment asset information according to the priority information of each piece of equipment asset information;
carrying out data combination on the reference data and asset attribute information in at least one piece of equipment asset information to be combined to obtain an updating result of the reference data;
and determining the asset information of the target equipment according to the updating result of the reference data.
In one implementation, the at least one piece of equipment asset information to be merged includes a 1 st data table to an mth data table, where M is a natural number greater than 1;
the data merging the reference data and the asset attribute information in the at least one piece of equipment asset information to be merged to obtain the updating result of the reference data, and the data merging method comprises the following steps:
obtaining the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table;
and under the condition that i is 1 to M in sequence, carrying out data merging on the asset attribute information in the reference data and the ith data table according to the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table to obtain the updating result of the reference data.
In one implementation, the data merging the reference data and the asset attribute information in the at least one piece of equipment asset information to be merged includes:
acquiring first field information, wherein the first field information is used for indicating the field content of the asset attribute information in the reference data and the confidence of the field content in the reference data;
acquiring second field information, wherein the second field information is used for indicating the field content of the asset attribute information in the ith data table and the confidence coefficient of the field content in the ith data table;
and according to the comparison result of the first field information and the second field information, carrying out data merging on the asset attribute information in the reference data and the ith data table.
In one implementation, the data merging the reference data and the asset attribute information in the at least one piece of equipment asset information to be merged includes:
traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged;
when the asset identification in the reference data and the asset identification in the equipment asset information to be merged correspond to the same asset identification, obtaining a confidence coefficient comparison result of the field content in the reference data and the confidence coefficient of the field content in the equipment asset information to be merged;
and according to the confidence degree comparison result, carrying out data combination on the asset attribute information in the reference data and the equipment asset information to be combined.
In one implementation, the data merging the asset attribute information in the reference data and the to-be-merged device asset information according to the confidence degree comparison result includes:
and when the confidence coefficient of the field content in the reference data is smaller than the confidence coefficient of the field content in the equipment asset information to be combined, updating the confidence coefficient of the field content and the field content in the reference data according to the confidence coefficient of the field content and the field content in the equipment asset information to be combined.
In one implementation, the data merging the reference data and the asset attribute information in the at least one piece of equipment asset information to be merged includes:
traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged;
and when the asset attribute information corresponding to the equipment asset information to be merged does not exist in the reference data, writing field content and confidence of the field content in the equipment asset information to be merged into the reference data.
In one implementation, the method further comprises: storing the target device asset information in a cache;
when the target equipment asset information in the cache meets a preset condition, executing any one of the following operations: storing the target equipment asset information in a database, and clearing the target equipment asset information in the cache;
the preset condition comprises that the data volume of the target equipment asset information is larger than a preset threshold value; or the time interval between the generation time of the target device asset information and the generation time of the device asset information in the database is greater than a preset time length.
An asset information processing apparatus provided in an embodiment of the present application includes:
the acquisition module is used for acquiring reference data in the asset information of the equipment; determining at least one piece of equipment asset information to be merged in the plurality of pieces of equipment asset information according to the priority information of each piece of equipment asset information;
the processing module is used for carrying out data combination on the reference data and the asset attribute information in the at least one piece of equipment asset information to be combined to obtain an updating result of the reference data;
and the determining module is used for determining the asset information of the target equipment according to the updating result of the reference data.
In one implementation, the at least one piece of equipment asset information to be merged includes a 1 st data table to an mth data table, where M is a natural number greater than 1;
the processing module is configured to perform data merging on the benchmark data and asset attribute information in the at least one piece of equipment asset information to be merged to obtain an update result of the benchmark data, and includes:
obtaining the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table;
and under the condition that i is 1 to M in sequence, carrying out data merging on the asset attribute information in the reference data and the ith data table according to the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table to obtain the updating result of the reference data.
In one implementation, the processing module is configured to perform data merging on the reference data and asset attribute information in at least one piece of device asset information to be merged, and includes:
acquiring first field information, wherein the first field information is used for indicating the field content of the asset attribute information in the reference data and the confidence of the field content in the reference data;
acquiring second field information, wherein the second field information is used for indicating the field content of the asset attribute information in the ith data table and the confidence coefficient of the field content in the ith data table;
and according to the comparison result of the first field information and the second field information, carrying out data merging on the asset attribute information in the reference data and the ith data table.
In one implementation, the processing module is configured to perform data merging on the reference data and asset attribute information in at least one piece of device asset information to be merged, and includes:
traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged;
when the asset identification in the reference data and the asset identification in the equipment asset information to be merged correspond to the same asset identification, obtaining a confidence coefficient comparison result of the field content in the reference data and the confidence coefficient of the field content in the equipment asset information to be merged;
and according to the confidence degree comparison result, carrying out data combination on the asset attribute information in the reference data and the equipment asset information to be combined.
In one implementation, the processing module is configured to perform data merging on the asset attribute information in the reference data and the to-be-merged device asset information according to the confidence comparison result, and includes:
and when the confidence coefficient of the field content in the reference data is smaller than the confidence coefficient of the field content in the equipment asset information to be combined, updating the confidence coefficient of the field content and the field content in the reference data according to the confidence coefficient of the field content and the field content in the equipment asset information to be combined.
In one implementation, the processing module is configured to perform data merging on the reference data and asset attribute information in at least one piece of device asset information to be merged, and includes:
traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged;
and when the asset attribute information corresponding to the equipment asset information to be merged does not exist in the reference data, writing field content and confidence of the field content in the equipment asset information to be merged into the reference data.
In one implementation, the determining module is further configured to: storing the target device asset information in a cache;
when the target equipment asset information in the cache meets a preset condition, executing any one of the following operations: storing the target equipment asset information in a database, and clearing the target equipment asset information in the cache;
the preset condition comprises that the data volume of the target equipment asset information is larger than a preset threshold value; or the time interval between the generation time of the target device asset information and the generation time of the device asset information in the database is greater than a preset time length.
The embodiment of the present application provides an electronic device, where the electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and when the processor executes the computer program, the asset information processing method provided in one or more of the foregoing technical solutions is implemented.
The embodiment of the application provides a computer storage medium, wherein a computer program is stored in the computer storage medium; the computer program can implement the asset information processing method provided by one or more of the above technical solutions after being executed.
Acquiring reference data of a plurality of pieces of equipment asset information based on the asset information processing method provided by the application; determining at least one piece of equipment asset information to be merged in the plurality of pieces of equipment asset information according to the priority information of the equipment asset information; carrying out data combination on the reference data and asset attribute information in at least one piece of equipment asset information to be combined to obtain an updating result of the reference data; and determining the asset information of the target equipment according to the updating result of the reference data. Because the user can configure the priority information of the equipment asset information, when at least one piece of equipment asset information to be merged is determined in the plurality of pieces of equipment asset information according to the priority information of the equipment asset information, the equipment asset information to be merged meets the priority requirement in asset information management, and therefore the accuracy of asset attribute information identification is improved.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the application.
Drawings
Fig. 1 is an application scenario diagram of an asset information processing method according to an embodiment of the present application;
FIG. 2 is a schematic flowchart of an asset information processing method according to an embodiment of the present application;
FIG. 3 is a schematic flowchart of data merging of the asset attribute information in the ith data table and the reference data according to an embodiment of the present application;
fig. 4 is a schematic flowchart of another data merging process performed on the asset attribute information in the reference data and the ith data table according to the embodiment of the present application;
FIG. 5 is a schematic view of another process for merging the asset attribute information in the ith data table and the reference data according to the embodiment of the present application;
fig. 6 is a schematic flowchart of a process for obtaining an update result of reference data according to an embodiment of the present application;
fig. 7 is a schematic flowchart of another process for obtaining an update result of reference data according to an embodiment of the present application;
fig. 8 is a schematic flowchart of another process for obtaining an update result of reference data according to an embodiment of the present application;
fig. 9 is a schematic diagram of an asset information processing apparatus according to an embodiment of the present application;
fig. 10 is a schematic structural diagram of an electronic device according to an embodiment of the present application.
Detailed Description
The present application will be described in further detail below with reference to the accompanying drawings and examples. It should be understood that the examples provided herein are merely illustrative of the present application and are not intended to limit the present application. In addition, the following examples are provided as partial examples for implementing the present application, not all examples for implementing the present application, and the technical solutions described in the examples of the present application may be implemented in any combination without conflict.
The asset information processing method provided by the application can be applied to a distributed system to manage the equipment asset information of the network equipment in the distributed system. In a distributed system, one or more network devices may be included, each as an asset device for a user to which the distributed system belongs.
Fig. 1 is a diagram illustrating an application scenario of an asset information processing method according to an embodiment of the present application. Referring to fig. 1, a plurality of network devices including network device 1, network device 2, … … network device i … … network device N are included in a distributed system. The network security device 101 may collect asset attribute information of at least one of the plurality of network devices and store the asset attribute information of the at least one network device in the network device asset information.
Referring to fig. 1, the asset information management platform 102 may be connected to at least one network security device 101, where the network security device 101 performs audit analysis on network traffic of at least one network device 103 to obtain asset information of the network device of the at least one network device 103; asset attribute information of at least one network device is recorded in the network device asset information.
The Data Adapter (Data Adapter) of the network security device 101 uses a processing engine as a core, provides a distributed Data collection management service, and realizes a flexible and general Data collection management function required by enterprise-level applications. Wherein, the built-in service of the processing engine comprises any one of the following: data collection, data extraction, data cleaning and data conversion.
In an example, the network device asset information may be used to characterize specific asset attributes of the network device, including without limitation network address data, network domain data, access tag data, and the like. Wherein the network address data may be a logical address of the asset in the network.
In an example, the logical address of the asset in the network may include any of: internet Protocol (IP) address, Media Access Control (Mac) address.
The Mac Address is Address information used to confirm a network location of the network device in the network, and is referred to as a local area network Address (LAN Address). The Mac Address may be an Ethernet Address (Ethernet Address) or a Physical Address (Physical Address).
In an example, the network domain data may be data associated with a name of a certain device or group of devices for use in locating an identity, e.g., domain name data and/or a Uniform Resource Locator (URL), with respect to the network device at the time of data transfer. The Access tag data may be data associated with an Access Point Name (APN) for identification of network device asset information for the network device.
In an example, the network security device may perform traffic auditing at the network ingress and egress, and transmit asset attribute information obtained by the traffic auditing to the asset information management platform. The device type of the network security device may include any one of: a network probe device, an Application Firewall (AF) device, an intrusion Detection system, and an Endpoint security Response (EDR) device.
Here, the EDR device is an extension and supplement of a traditional terminal security product in terms of advanced threat detection and response, and estimates unknown risks existing in an enterprise network from dimensions of a host, a network, users, files and the like through threat intelligence, attack and defense countermeasures, machine learning and the like.
In an example, a network probe device may be a network traffic processing tool capable of collecting, analyzing, and extracting information for network traffic, applied to hundreds, giga, and tens of millions of network environments; customized flow collection based on complex rules is supported; the method supports information acquisition based on a Domain Name System (DNS) protocol, a hypertext transfer protocol (HTTP) protocol and a Secure Sockets Layer (SSL) protocol.
In the related technology, when asset information is processed, for the network equipment asset information identified by different network security equipment, the network equipment asset information in a database is directly covered according to the network equipment asset information which is newly acquired by the network security equipment, and the network equipment asset information of the same asset identifier in the database is mutually covered, so that the asset attribute information in the network equipment asset information is frequently changed, and the accuracy of the network equipment asset information is influenced.
In order to solve the above problems, the present application provides an asset information processing method, apparatus, electronic device, and computer storage medium. Hereinafter, the asset information processing method provided by the present application will be described in detail.
Fig. 2 shows a schematic flow chart of an asset information processing method provided by an embodiment of the present application. Referring to fig. 2, the asset information processing method provided in the embodiment of the present application may include the following steps:
step A201: acquiring reference data in the asset information of a plurality of devices; and determining at least one piece of equipment asset information to be combined in the plurality of pieces of equipment asset information according to the priority information of each piece of equipment asset information.
Here, the device asset information may include asset attribute information of at least one network device, and the network device may be a virtual device or a physical device. The virtual device may be a virtual machine, and the entity device may include a terminal device, a physical machine, a server, and other hardware devices.
In an example, the plurality of device asset information may be device asset information derived from a plurality of different network security device collections. For example, device asset information collected by x network probe devices, y AF devices, and z EDR devices. Here, x, y, z may be a natural number greater than 1.
In an example, Asset attribute information may uniquely correspond to an Asset identification (Asset ID, AID) of a network device. The asset attribute information may include at least one attribute data corresponding to an asset identification. Referring to table 1, the fields of the attribute data may include any one of: an IP address of the network device, an identification of a data Adapter (Adapter ID) of the network security device, a Mac address of the network device.
TABLE 1 fields of asset attribute information
Figure BDA0003240224560000091
In practical application, the asset identification of the network device is determined according to the Mac address of the network device, and the network devices with the same Mac address belong to the same network device. Or generating the asset identification of the network equipment according to the IP address of the network equipment, the identification of the data adapter and the Mac address of the network equipment.
In an example, time stamp information of each of the plurality of pieces of device asset information is acquired, and the device asset information having the earliest time stamp information among the plurality of pieces of device asset information is determined as reference data among the plurality of pieces of device asset information.
In an example, when the device asset information stored in the database is included in the plurality of device asset information, the device asset information stored in the database is determined as reference data in the plurality of device asset information.
In an example, referring to table 2, according to the priority information of each piece of device asset information, among the plurality of pieces of device asset information, the piece of device asset information whose priority information is smaller than a preset value is determined as the piece of device asset information to be merged. Here, the smaller the priority information of the device asset information is, the higher the priority of the device asset information is at the time of data consolidation.
TABLE 2 priority information for device asset information
Adapter ID Type of network security device Priority information for device asset information
Adapter_01 Probe apparatus 3
Adapter_02 Application firewall device 2
Adapter_03 Terminal safety response device 1
Adapter_04 Application firewall device 2
Adapter_05 Probe apparatus 3
In practical applications, when the device types of the adapters are the same, the same priority information may be set for the device asset information of the same device type.
Step A202: and carrying out data combination on the reference data and the asset attribute information in the at least one piece of equipment asset information to be combined to obtain an updating result of the reference data.
In an example, the at least one device asset information to be merged may include a 1 st data table to an mth data table, M being a natural number greater than 1. And according to the asset identification, carrying out data combination on the reference data and the asset attribute information in the 1 st data table to the Mth data table. Hereinafter, the description will be made in two cases.
And when the asset attribute information corresponding to the jth asset identification in the ith data table exists in the reference data, carrying out data merging on the asset attribute information with the same asset identification in the reference data and the ith data table.
For example, a confidence degree comparison result of the confidence degree of the field content in the reference data and the confidence degree of the field content in the ith data table is obtained, and the asset attribute information with the same asset identification in the reference data and the ith data table is subjected to data merging according to the confidence degree comparison result, so that the accuracy of the asset attribute information in the reference data is improved.
And when the asset attribute information corresponding to the jth asset identification in the ith data table does not exist in the reference data, merging the asset attribute information corresponding to the jth asset identification in the ith data table into the reference data, thereby improving the integrity of the asset attribute information in the reference data.
In an example, according to the timestamp information of the device asset information, device asset information of which the timestamp information meets a preset condition in the at least one piece of device asset information to be merged is determined. And carrying out data combination on the equipment asset information of which the reference data and the timestamp information meet the preset conditions.
Here, the timestamp information may be saved in a configuration file of the device asset information; the preset condition may include that the time stamp information in the device asset information is later than a preset time value.
It should be understood that when the timestamp information in the device asset information is later than the preset time value, the device asset information is described as belonging to the latest acquired information after the preset time value, and therefore, the timeliness of the device asset information is enhanced.
Step A203: and determining the asset information of the target equipment according to the updating result of the reference data.
In an example, the at least one piece of equipment asset information to be merged may include an ith data table, where 1 ≦ i ≦ M, where the ith data table is the ith piece of equipment asset information to be merged. And carrying out data combination on the reference data and the asset attribute information in the ith data table to obtain an updating result of the reference data.
And further, taking the updating result of the reference data as the reference data, and performing data merging on the reference data and the asset attribute information in the (i + 1) th data table to obtain the updating result of the reference data.
In an example, under the condition that i is 1 to M in sequence, data merging is performed on the reference data and asset attribute information in the 1 st data table to the mth data table to obtain target device asset information.
Acquiring reference data in the asset information of a plurality of devices based on the asset information processing method provided by the application; determining at least one piece of equipment asset information to be merged in the plurality of pieces of equipment asset information according to the priority information; carrying out data combination on the reference data and asset attribute information in at least one piece of equipment asset information to be combined to obtain an updating result of the reference data; and determining the asset information of the target equipment according to the updating result of the reference data. Because the user can configure the priority information of the equipment asset information, when at least one piece of equipment asset information to be merged is determined in the plurality of pieces of equipment asset information according to the priority information, the data to be merged meets the priority requirement in asset information management, and therefore the accuracy of asset attribute information identification is improved.
In practical applications, the steps a201 to a203 may be implemented by a Processor, and the Processor may be at least one of an Application Specific Integrated Circuit (ASIC), a Digital Signal Processor (DSP), a Digital Signal Processing Device (DSPD), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Central Processing Unit (CPU), a controller, a microcontroller, and a microprocessor.
In one implementation, the at least one piece of equipment asset information to be merged includes a 1 st data table to an Mth data table, where M is a natural number greater than 1; in the step a202, the data merging the asset attribute information in the reference data and the at least one piece of equipment asset information to be merged to obtain the update result of the reference data, which may include the following steps:
obtaining the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table;
and under the condition that i is 1 to M in sequence, carrying out data combination on the asset attribute information in the reference data and the ith data table according to the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table to obtain the updating result of the reference data.
In an example, the at least one device asset information to be merged may include an ith data table, and in the ith data table, asset attribute information corresponding to each asset identifier is obtained. Referring to table 3, according to the confidence of the field content in the reference data and the confidence of the field content in the ith data table, when the confidence of the field content in the ith data table is greater than a preset value, data merging is performed on the asset attribute information in the reference data and the ith data table, so as to obtain an update result of the reference data.
TABLE 3 confidence of device asset information
Figure BDA0003240224560000121
Figure BDA0003240224560000131
In practical applications, referring to table 3, when the device types of the adapters are the same, different confidences may be set for the device asset information of the identifiers of the same device type and different network security devices.
It should be understood that confidence is data that indicates the trustworthiness of the device asset information. The higher the confidence coefficient is, the higher the credibility of the equipment asset information is shown to be, namely, the accuracy of the equipment asset information is higher; the lower the tag confidence, the lower the confidence level of the device asset information, i.e., the lower the accuracy of the device asset information.
In practical application, the priority information of the equipment asset information can be normalized, and the confidence coefficient of the set asset information is calculated according to the normalization result of the priority information of the equipment asset information.
Here, the numerical range of the confidence corresponds to the confidence interval [0, 1 ]. Confidence is related to the confidence interval, and the confidence interval for a probability sample is an interval estimate for some overall parameter of the probability sample.
In the embodiment of the application, under the condition that i is 1 to M in sequence, traversing the 1 st data table to the M th data table, and performing data merging on asset attribute information in the reference data and the i th data table according to the confidence degree of the field content in the reference data and the confidence degree of the field content in the i th data table to obtain the update result of the reference data. Because the confidence coefficient can reflect the reliability of the datum data and the data in the ith data table, the updating result of the datum data is obtained based on data combination, and the accuracy of asset attribute information identification can be improved.
In one implementation, in the step a202, data merging is performed on the reference data and asset attribute information in at least one piece of device asset information to be merged, referring to fig. 3, the method may include the following steps:
step A301: first field information is obtained, wherein the first field information is used for indicating the field content of the asset attribute information in the reference data and the confidence coefficient of the field content in the reference data.
Here, the first field information may include field contents of asset attribute information corresponding to at least one asset identifier in the reference data.
In an example, the confidence of the field content in the reference data is u, and the field content of the asset attribute information in the reference data may include the field content corresponding to any one of the following fields: IP address, Adapter ID, Mac address, access point name, domain name data.
Step A302: and acquiring second field information, wherein the second field information is used for indicating the field content of the asset attribute information in the ith data table and the confidence coefficient of the field content in the ith data table.
Here, the second field information may include field contents of asset attribute information corresponding to at least one asset identifier in the ith data table. For example, the second field information may include the field content of the asset attribute information corresponding to the jth asset identifier in the ith data table and the confidence level of the field content corresponding to the jth asset identifier.
In the example, the confidence of the field contents in the ith data table is viThe field contents of the asset attribute information in the ith data table may include field contents corresponding to any one of the following fields: IP address, Adapter ID, Mac address, access point name, domain name data.
In practical applications, the execution sequence between the step a301 and the step a302 is not limited; the steps a301 and a302 may be performed sequentially or simultaneously.
Step A303: and according to the comparison result of the first field information and the second field information, carrying out data merging on the asset attribute information in the reference data and the ith data table.
In the example, the confidence of the field content in the reference data is u, and the confidence of the field content in the ith data table is viAnd comparing, and merging the asset attribute information in the ith data table into the reference data when the confidence coefficient of the field content in the ith data table is greater than that of the field content in the reference data.
In the embodiment of the application, according to the comparison result of the first field information and the second field information, the asset attribute information in the reference data and the ith data table is subjected to data merging. The first field information is used for indicating the field content of the asset attribute information in the reference data and the confidence degree of the field content in the reference data, and the second field information is used for indicating the field content of the asset attribute information in the ith data table and the confidence degree of the field content in the ith data table. Therefore, different field contents in the asset attribute information can be subjected to data combination according to the comparison result of the confidence degrees of the two data sources corresponding to each field content, and therefore the accuracy of asset attribute information identification is improved.
In one implementation, in the step a202, data merging is performed on the reference data and asset attribute information in at least one piece of device asset information to be merged, referring to fig. 4, the method may include the following steps:
step A401: and traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged.
In an example, the second field information belongs to part or all of the field information in the device asset information to be merged, and the field content corresponding to each asset identifier in the second field information is traversed according to the corresponding relationship between the asset identifier in the second field information and the field content in the second field information.
In an example, the second field information includes an asset identification of the asset attribute information in the ith data table. And in the ith data table, asset attribute information corresponding to N asset identifications is included, wherein N is a natural number greater than 1. The asset attribute information corresponding to the N asset identifications includes asset attribute information corresponding to the jth asset identification.
In an example, the field content of the asset attribute information corresponding to the jth asset identifier is obtained, and whether the field content of the asset attribute information corresponding to the jth asset identifier exists in the reference data is determined. And traversing the field content of the asset attribute information corresponding to each asset identifier under the condition that j is 1 to N in sequence.
Step A402: and when the asset identification in the reference data and the asset identification in the equipment asset information to be combined are the same asset identification, acquiring a confidence coefficient comparison result of the field content in the reference data and the confidence coefficient of the field content in the equipment asset information to be combined.
In an example, the first field information includes asset attribute information in the reference data. And when the asset identification in the first field information and the asset identification in the second field information correspond to the same asset identification, acquiring a confidence degree comparison result of the confidence degree of the field content in the first field information and the confidence degree of the field content in the second field information.
In an example, when the jth asset identifier in the ith data table and one of the asset identifiers in the reference data correspond to the same Mac address, a confidence degree comparison result of the confidence degree of the field content in the first field information and the confidence degree of the field content in the second field information is obtained.
In an example, when the field content of the asset attribute information corresponding to the jth asset identifier exists in the reference data, whether the confidence coefficient of the field content in the ith data table is greater than that of the field content in the reference data is judged, and a confidence coefficient comparison result of the confidence coefficient of the field content in the first field information and the confidence coefficient of the field content in the second field information is obtained.
Step A403: and according to the confidence degree comparison result, carrying out data combination on the asset attribute information in the reference data and the equipment asset information to be combined.
In an example, the asset attribute information in the benchmark data and the ith data table are data merged according to the confidence degree comparison result.
In an example, the confidence of the field content in the ith data table is greater than the confidence of the field content in the reference data, and the asset attribute information corresponding to the jth asset identification in the ith data table is merged into the reference data.
For example, in the ith data table, according to the field content and the confidence level of the field content of the asset attribute information corresponding to the jth asset identifier, the field content and the confidence level of the field content of the asset attribute information, which is the same as the asset identifier of the jth asset identifier, in the reference data are updated.
In an example, the confidence of the field content in the ith data table is smaller than the confidence of the field content in the reference data, and the data merging is not performed on the asset attribute information corresponding to the jth asset identifier in the ith data table.
In the embodiment of the present application, according to the corresponding relationship between the asset identifier in the second field information and the field content in the second field information, the field content corresponding to each asset identifier in the second field information is traversed. And when the asset identification in the first field information and the asset identification in the second field information correspond to the same asset identification, carrying out data merging on the asset attribute information in the reference data and the ith data table according to a confidence coefficient comparison result of the obtained confidence coefficient of the field content in the first field information and the obtained confidence coefficient of the field content in the second field information. Therefore, the asset attribute information corresponding to each asset identifier in the ith data table can be subjected to data merging, and the integrity of asset attribute information identification is improved.
In one implementation, in the step a403, according to the result of the confidence comparison, data merging is performed on the asset attribute information in the reference data and the device asset information to be merged, which may include the following steps:
and when the confidence coefficient of the field content in the reference data is smaller than the confidence coefficient of the field content in the equipment asset information to be combined, updating the confidence coefficient of the field content and the field content in the reference data according to the confidence coefficient of the field content and the field content in the equipment asset information to be combined.
In an example, when the confidence of the field content in the first field information is less than the confidence of the field content in the second field information, the confidence of the field content and the field content in the first field information is updated according to the confidence of the field content and the field content in the second field information.
In an example, when a field of asset attribute information corresponding to the jth asset identifier exists in the reference data and the confidence degree of the field content in the reference data is smaller than that of the field content in the ith data table, the field content in the reference data and the confidence degree of the field content are updated according to the field content and the confidence degree of the field content in the ith data table.
In the embodiment of the application, when the confidence of the field content in the first field information is smaller than the confidence of the field content in the second field information, the confidence of the field content and the field content in the first field information is updated according to the confidence of the field content and the field content in the second field information, so that the accuracy of the asset attribute information in the reference data can be improved.
In one implementation, in the step a202, data merging is performed on the reference data and asset attribute information in at least one piece of device asset information to be merged, referring to fig. 5, the method may include the following steps:
step A501: and traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged.
In an example, according to the corresponding relationship between the asset identification in the second field information and the field content in the second field information, the corresponding field content of each asset identification in the second field information is traversed.
In an example, the field content of the asset attribute information corresponding to the jth asset identifier is obtained, and whether the field content of the asset attribute information corresponding to the jth asset identifier exists in the reference data is determined. And traversing the field content of the asset attribute information corresponding to each asset identifier under the condition that j is 1 to N in sequence.
Step A502: and when the asset attribute information corresponding to the equipment asset information to be merged does not exist in the reference data, writing field content in the equipment asset information to be merged and the confidence coefficient of the field content in the reference data.
In an example, when the asset attribute information corresponding to the second field information does not exist in the reference data, the field content in the second field information and the confidence level of the field content are written in the reference data.
In an example, when the field of the asset attribute information corresponding to the jth asset identification does not exist in the reference data, the field content and the confidence of the field content of the asset attribute information corresponding to the jth asset identification are written in the reference data.
In an example, according to the corresponding relationship between the asset identification in the second field information and the field content in the second field information, the corresponding field content of each asset identification in the second field information is traversed. When the asset attribute information corresponding to the second field information does not exist in the reference data, the field content in the second field information and the confidence coefficient of the field content are written in the reference data, so that the integrity of asset attribute information identification can be improved.
In one implementation, in the asset information processing method, the method may further include the following steps:
storing the asset information of the target equipment into a cache; when the target device asset information in the cache meets a preset condition, executing any one of the following operations: and storing the asset information of the target equipment in a database and emptying the asset information of the target equipment in a cache.
In an example, the preset condition may include that the data amount of the target device asset information is greater than a preset threshold; or the time interval between the generation time of the target device asset information and the generation time of the device asset information in the database is greater than the preset time length.
In an example, the target device asset information is stored in a cache, when the data volume of the target device asset information is larger than a preset threshold, the updating result of the reference data is stored in a database, and the updating result of the reference data in the cache is emptied.
In an example, the target device asset information is stored in a cache, when the time interval between the generation time of the target device asset information and the generation time of the device asset information in the database is greater than a preset time length, the update result of the reference data is stored in the database, and the update result of the reference data in the cache is emptied.
In the embodiment of the application, the asset information of the target device is stored in the cache, and when the asset information of the target device in the cache meets the preset condition, the asset information of the target device is stored in the database, so that the real-time property of asset attribute information identification can be improved.
Based on the same technical concept as the foregoing embodiment, referring to fig. 6, the asset information processing method provided in the embodiment of the present application may include the following steps:
step A601: at least one device asset information to be merged is determined.
In an example, at least one device asset information to be merged is determined among the plurality of device asset information according to the priority information of the device asset information.
Step A602: and acquiring asset attribute information in the at least one piece of equipment asset information to be merged.
Step A603: and carrying out data combination on the reference data and the asset attribute information in the at least one piece of equipment asset information to be combined to obtain an updating result of the reference data.
Step A604: and storing the updating result of the reference data into a cache.
In an example, the update result of the reference data is output, and the update result of the reference data is stored in a cache.
Step A605: it is determined whether the asset attribute information in the baseline data belongs to the same time period.
In an example, when the asset attribute information in the reference data belongs to the same period, the following step a606 is performed.
Step A606: and storing the updating result of the reference data into a database, and emptying the updating result of the reference data in the cache.
Based on the same technical concept of the foregoing embodiment, referring to fig. 7, in the above step a603, performing data merging on asset attribute information in at least one device asset information to be merged may include the following steps:
step A701: and determining at least one piece of equipment asset information to be merged in the plurality of pieces of equipment asset information according to the priority information of the equipment asset information.
In an example, the at least one device asset information to be merged includes a 1 st data table to an mth data table, M being a natural number greater than 1.
Step A702: and traversing the asset attribute information in each piece of equipment asset information to be merged under the condition that i is 1 to M in sequence.
Step A703: and in the ith data table, acquiring asset attribute information corresponding to each asset identification.
In an example, the second field information is used for indicating the field content of the asset attribute information in the ith data table and the confidence of the field content in the ith data table, and the corresponding field content of each asset identification in the second field information is traversed according to the corresponding relationship between the asset identification in the second field information and the field content in the second field information.
Step A704: and merging the data of the asset attribute information in the reference data and the ith data table.
Step A705: and performing data updating on the reference data to obtain an updating result of the reference data.
Step A706: it is determined whether the traversal process is complete.
In an example, upon determining that the traversal process has been completed, the following step a707 is performed, otherwise, the above step a702 is continued.
Step A707: and outputting the updating result of the reference data.
Based on the same technical concept as the foregoing embodiment, referring to fig. 8, in the above step a703, performing data merging on the asset attribute information in the reference data and the ith data table may include the following steps:
step A801: and acquiring asset attribute information corresponding to the jth asset identification in the ith data table.
In an example, the ith data table includes asset attribute information corresponding to the 1 st to nth asset identifications.
Step A802: and traversing the field content corresponding to each asset identification under the condition that j is 1 to N in sequence.
Step A803: it is determined whether the field content corresponding to the jth asset identification is present in the baseline data.
In an example, the field content of the asset attribute information corresponding to the jth asset identification does not exist in the reference data, the following step a804 is performed, otherwise, the following step a805 is performed.
Step A804: and writing the field content corresponding to the jth asset identification and the confidence coefficient of the field content in the reference data.
In an example, when the asset attribute information corresponding to the second field information does not exist in the reference data, the field content and the confidence of the field content of the asset attribute information corresponding to the jth asset identification are written.
In an example, after step a804 is completed, the above-described step a802 is continuously performed.
Step A805: it is determined whether the confidence level of the contents of the fields in the ith data table is greater than the confidence level of the contents of the fields in the baseline data.
In an example, when the confidence of the contents of the field in the ith data table is greater than the confidence of the contents of the field in the reference data, the following step a806 is performed.
In an example, when the confidence of the field content in the ith data table is smaller than the confidence of the field content in the reference data, the asset attribute information corresponding to the jth asset identifier in the ith data table is not subjected to data merging.
Step A806: and updating the field contents and the confidence degrees of the field contents in the reference data according to the field contents and the confidence degrees of the field contents in the ith data table.
In an example, when the confidence of the field content in the ith data table is smaller than the confidence of the field content in the reference data, the confidence of the field content and the field content in the first field information is updated according to the confidence of the field content and the field content in the second field information.
Step a807, it is determined whether the traversal process is complete.
In an example, upon determining that the traversal process has been completed, the following step a808 is performed, otherwise, the above step a802 is continued.
Step A808: and updating the integral confidence coefficient of the reference data to obtain an updating result of the reference data.
In an example, asset attribute information corresponding to each asset identification in the reference data is determined, and the overall confidence of the reference data is determined according to a weighted average of the confidence of the field content in the asset attribute information corresponding to each asset identification.
Based on the same technical concept as the foregoing embodiment, referring to fig. 9, an asset information processing apparatus provided in an embodiment of the present application may include:
an obtaining module 901, configured to obtain reference data in multiple pieces of equipment asset information; determining at least one piece of equipment asset information to be combined in the plurality of pieces of equipment asset information according to the priority information of the equipment asset information;
a processing module 902, configured to perform data merging on the benchmark data and asset attribute information in the at least one piece of equipment asset information to be merged to obtain an update result of the benchmark data;
and a determining module 903, configured to determine the target device asset information according to the update result of the reference data.
In one implementation, the at least one piece of equipment asset information to be merged includes a 1 st data table to an mth data table, where M is a natural number greater than 1;
the processing module 902 is configured to perform data merging on the benchmark data and asset attribute information in at least one piece of equipment asset information to be merged to obtain an update result of the benchmark data, and includes:
obtaining the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table;
and under the condition that i is 1 to M in sequence, carrying out data merging on the asset attribute information in the reference data and the ith data table according to the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table to obtain the updating result of the reference data.
In one implementation, the processing module 902 is configured to perform data merging on the reference data and asset attribute information in at least one piece of device asset information to be merged, and includes:
acquiring first field information, wherein the first field information is used for indicating the field content of the asset attribute information in the reference data and the confidence of the field content in the reference data;
acquiring second field information, wherein the second field information is used for indicating the field content of the asset attribute information in the ith data table and the confidence coefficient of the field content in the ith data table;
and according to the comparison result of the first field information and the second field information, carrying out data merging on the asset attribute information in the reference data and the ith data table.
In one implementation, the processing module 902 is configured to perform data merging on the reference data and asset attribute information in at least one piece of device asset information to be merged, and includes:
traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged;
when the asset identification in the reference data and the asset identification in the equipment asset information to be merged correspond to the same asset identification, obtaining a confidence coefficient comparison result of the field content in the reference data and the confidence coefficient of the field content in the equipment asset information to be merged;
and according to the confidence degree comparison result, carrying out data combination on the asset attribute information in the reference data and the equipment asset information to be combined.
In one implementation, the processing module 902 is configured to perform data merging on the asset attribute information in the reference data and the to-be-merged device asset information according to the confidence comparison result, where the data merging includes:
and when the confidence coefficient of the field content in the reference data is smaller than the confidence coefficient of the field content in the equipment asset information to be combined, updating the confidence coefficient of the field content and the field content in the reference data according to the confidence coefficient of the field content and the field content in the equipment asset information to be combined.
In one implementation, the processing module 902 is configured to perform data merging on the reference data and asset attribute information in at least one piece of device asset information to be merged, and includes:
traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged;
and when the asset attribute information corresponding to the equipment asset information to be merged does not exist in the reference data, writing field content and confidence of the field content in the equipment asset information to be merged into the reference data.
In one implementation, the determining module 903 is further configured to: storing the target device asset information in a cache;
when the target equipment asset information in the cache meets a preset condition, executing any one of the following operations: storing the target equipment asset information in a database, and clearing the target equipment asset information in the cache;
the preset condition comprises that the data volume of the target equipment asset information is larger than a preset threshold value; or the time interval between the target equipment asset information and the equipment asset information in the database is greater than a preset time length.
In practical applications, the obtaining module 901, the processing module 902, and the determining module 903 may all be implemented by a processor of an electronic device, where the processor may be at least one of an ASIC, a DSP, a DSPD, a PLD, an FPGA, a CPU, a controller, a microcontroller, and a microprocessor, and the embodiment of the present application is not limited thereto.
In some embodiments, functions of or modules included in the apparatus provided in the embodiments of the present application may be used to execute the method described in the above method embodiments, and specific implementation thereof may refer to the description of the above method embodiments, and for brevity, will not be described again here.
Based on the same technical concept as the foregoing embodiment, referring to fig. 10, an electronic device 1000 provided in an embodiment of the present application may include: a memory 1010 and a processor 1020; wherein the content of the first and second substances,
a memory 1010 for storing computer programs and data;
a processor 1020 for executing the computer program stored in the memory to implement any one of the asset information processing methods in the foregoing embodiments.
In practical applications, the memory 1010 may be a volatile memory (volatile memory), such as RAM; or a non-volatile memory (non-volatile memory), illustratively a ROM, a flash memory, a Hard Disk Drive (HDD) or a Solid-State Drive (SSD); or a combination of the above types of memories. The memory 1010 may provide instructions and data to the processor 1020.
The foregoing descriptions of the various embodiments are intended to highlight different aspects of the various embodiments, which have the same or similar aspects, and thus, for brevity, detailed descriptions thereof are omitted
The methods disclosed in the method embodiments provided by the present application can be combined arbitrarily without conflict to obtain new method embodiments.
Features disclosed in various product embodiments provided by the application can be combined arbitrarily to obtain new product embodiments without conflict.
The features disclosed in the various method or apparatus embodiments provided herein may be combined in any combination to arrive at new method or apparatus embodiments without conflict.
In the several embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described device embodiments are merely illustrative, and for example, the division of the unit is only one logical function division, and there may be other division ways in actual implementation, such as: multiple units or components may be combined, or may be integrated into another system, or some features may be omitted, or not implemented. In addition, the coupling, direct coupling or communication between the components shown or discussed may be through some interfaces, and the indirect coupling or communication between the devices or units may be electrical, mechanical or other forms.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of grid units; some or all of the units can be selected according to actual conditions to achieve the purpose of the scheme of the embodiment.
In addition, all functional units in the embodiments of the present application may be integrated into one processing module, or each unit may be separately regarded as one unit, or two or more units may be integrated into one unit; the integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.
Those of ordinary skill in the art will understand that: all or part of the steps for implementing the method embodiments may be implemented by hardware related to program instructions, and the program may be stored in a computer readable storage medium, and when executed, the program performs the steps including the method embodiments.
The above description is only for the specific embodiments of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present application, and shall be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (10)

1. An asset information processing method, comprising:
acquiring reference data in the asset information of a plurality of devices; determining at least one piece of equipment asset information to be merged in the plurality of pieces of equipment asset information according to the priority information of each piece of equipment asset information;
carrying out data combination on the reference data and asset attribute information in at least one piece of equipment asset information to be combined to obtain an updating result of the reference data;
and determining the asset information of the target equipment according to the updating result of the reference data.
2. The method according to claim 1, wherein the at least one device asset information to be merged comprises a 1 st data table to an Mth data table, M being a natural number greater than 1;
the data merging the reference data and the asset attribute information in the at least one piece of equipment asset information to be merged to obtain the updating result of the reference data, and the data merging method comprises the following steps:
obtaining the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table;
and under the condition that i is 1 to M in sequence, carrying out data merging on the asset attribute information in the reference data and the ith data table according to the confidence coefficient of the field content in the reference data and the confidence coefficient of the field content in the ith data table to obtain the updating result of the reference data.
3. The method according to claim 1, wherein the data merging the reference data and the asset attribute information in the at least one piece of equipment asset information to be merged comprises:
acquiring first field information, wherein the first field information is used for indicating the field content of the asset attribute information in the reference data and the confidence of the field content in the reference data;
acquiring second field information, wherein the second field information is used for indicating the field content of the asset attribute information in the ith data table and the confidence coefficient of the field content in the ith data table;
and according to the comparison result of the first field information and the second field information, carrying out data merging on the asset attribute information in the reference data and the ith data table.
4. The method according to claim 1, wherein the data merging the reference data and the asset attribute information in the at least one piece of equipment asset information to be merged comprises:
traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged;
when the asset identification in the reference data and the asset identification in the equipment asset information to be merged are the same asset identification, obtaining a confidence coefficient comparison result of the field content in the reference data and the confidence coefficient of the field content in the equipment asset information to be merged;
and according to the confidence degree comparison result, carrying out data combination on the asset attribute information in the reference data and the equipment asset information to be combined.
5. The method according to claim 4, wherein the data merging of the asset attribute information in the benchmark data and the device asset information to be merged according to the confidence degree comparison result comprises:
and when the confidence coefficient of the field content in the reference data is smaller than the confidence coefficient of the field content in the equipment asset information to be combined, updating the confidence coefficient of the field content and the field content in the reference data according to the confidence coefficient of the field content and the field content in the equipment asset information to be combined.
6. The method according to claim 1, wherein the data merging the reference data and the asset attribute information in the at least one piece of equipment asset information to be merged comprises:
traversing the field content corresponding to each asset identifier in the equipment asset information to be merged according to the corresponding relation between the asset identifier in the equipment asset information to be merged and the field content in the equipment asset information to be merged;
and when the asset attribute information corresponding to the equipment asset information to be merged does not exist in the reference data, writing field content and confidence of the field content in the equipment asset information to be merged into the reference data.
7. The method according to any one of claims 1-6, further comprising:
storing the target device asset information in a cache;
when the target equipment asset information in the cache meets a preset condition, executing any one of the following operations: storing the target equipment asset information in a database, and clearing the target equipment asset information in the cache;
the preset condition comprises that the data volume of the target equipment asset information is larger than a preset threshold value; or the time interval between the generation time of the target device asset information and the generation time of the device asset information in the database is greater than a preset time length.
8. An asset information processing apparatus characterized by comprising:
the acquisition module is used for acquiring reference data in the asset information of the equipment; determining at least one piece of equipment asset information to be merged in the plurality of pieces of equipment asset information according to the priority information of each piece of equipment asset information;
the processing module is used for carrying out data combination on the reference data and the asset attribute information in the at least one piece of equipment asset information to be combined to obtain an updating result of the reference data;
and the determining module is used for determining the asset information of the target equipment according to the updating result of the reference data.
9. An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor implementing the asset information processing method of any one of claims 1 to 7 when executing the program.
10. A computer storage medium storing a computer program; characterized in that the computer program is capable of implementing the asset information processing method of any one of claims 1 to 7 when executed.
CN202111015915.6A 2021-08-31 2021-08-31 Asset information processing method and device, electronic equipment and storage medium Pending CN113704266A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111015915.6A CN113704266A (en) 2021-08-31 2021-08-31 Asset information processing method and device, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111015915.6A CN113704266A (en) 2021-08-31 2021-08-31 Asset information processing method and device, electronic equipment and storage medium

Publications (1)

Publication Number Publication Date
CN113704266A true CN113704266A (en) 2021-11-26

Family

ID=78658265

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111015915.6A Pending CN113704266A (en) 2021-08-31 2021-08-31 Asset information processing method and device, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN113704266A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114500261A (en) * 2022-01-24 2022-05-13 深信服科技股份有限公司 Network asset identification method and device, electronic equipment and storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1975772A (en) * 2006-12-22 2007-06-06 中国建设银行股份有限公司 Method and device for integrating information in multi-system
CN106326249A (en) * 2015-06-23 2017-01-11 中兴通讯股份有限公司 Data integration processing method and device
WO2019051814A1 (en) * 2017-09-15 2019-03-21 达闼科技(北京)有限公司 Target recognition method and apparatus, and intelligent terminal
CN110263314A (en) * 2019-06-19 2019-09-20 北京明略软件系统有限公司 Form processing method and device, storage medium, electronic device
CN110555071A (en) * 2019-09-03 2019-12-10 北京明略软件系统有限公司 Data fusion processing method and device, storage medium and electronic device

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1975772A (en) * 2006-12-22 2007-06-06 中国建设银行股份有限公司 Method and device for integrating information in multi-system
CN106326249A (en) * 2015-06-23 2017-01-11 中兴通讯股份有限公司 Data integration processing method and device
WO2019051814A1 (en) * 2017-09-15 2019-03-21 达闼科技(北京)有限公司 Target recognition method and apparatus, and intelligent terminal
CN110263314A (en) * 2019-06-19 2019-09-20 北京明略软件系统有限公司 Form processing method and device, storage medium, electronic device
CN110555071A (en) * 2019-09-03 2019-12-10 北京明略软件系统有限公司 Data fusion processing method and device, storage medium and electronic device

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114500261A (en) * 2022-01-24 2022-05-13 深信服科技股份有限公司 Network asset identification method and device, electronic equipment and storage medium
CN114500261B (en) * 2022-01-24 2024-01-02 深信服科技股份有限公司 Network asset identification method and device, electronic equipment and storage medium

Similar Documents

Publication Publication Date Title
JP6571914B2 (en) Detecting anomalies in job performance data by combining multiple domains of information
CN106649831B (en) Data filtering method and device
US11240263B2 (en) Responding to alerts
CN107920055B (en) IP risk evaluation method and IP risk evaluation system
US20210092160A1 (en) Data set creation with crowd-based reinforcement
EP2692119B1 (en) Non-existent domain names traffic analysis
CN110099059A (en) A kind of domain name recognition methods, device and storage medium
CN104579773A (en) Domain name system analysis method and device
CN110071829B (en) DNS tunnel detection method and device and computer readable storage medium
US20180191736A1 (en) Method and apparatus for collecting cyber incident information
CN108156141B (en) Real-time data identification method and device and electronic equipment
WO2017021290A1 (en) Network operation
EP3913888A1 (en) Detection method for malicious domain name in domain name system and detection device
US11777807B2 (en) Fingerprint determination for network mapping
CN110679114A (en) Method for estimating deletability of data object
CN110430070B (en) Service state analysis method, device, server, data analysis equipment and medium
CN113704266A (en) Asset information processing method and device, electronic equipment and storage medium
US20220182401A1 (en) Automated identification of false positives in dns tunneling detectors
CN115146263A (en) User account collapse detection method and device, electronic equipment and storage medium
US20230008765A1 (en) Estimation apparatus, estimation method and program
EP3361405A1 (en) Enhancement of intrusion detection systems
CN114564349A (en) Server monitoring method and device, electronic equipment and storage medium
CN111611483A (en) Object portrait construction method, device, equipment and storage medium
CN116015818A (en) IOC detection method, device, medium and equipment based on machine learning
CN117155618A (en) Network space mapping method and system based on cname and computing equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination