CN114688407A - Network space intelligent asset detection device - Google Patents
Network space intelligent asset detection device Download PDFInfo
- Publication number
- CN114688407A CN114688407A CN202210280583.2A CN202210280583A CN114688407A CN 114688407 A CN114688407 A CN 114688407A CN 202210280583 A CN202210280583 A CN 202210280583A CN 114688407 A CN114688407 A CN 114688407A
- Authority
- CN
- China
- Prior art keywords
- detection
- asset
- network
- cyberspace
- scanning
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000001514 detection method Methods 0.000 title claims abstract description 111
- 230000001681 protective effect Effects 0.000 claims abstract description 32
- 238000000034 method Methods 0.000 claims description 5
- 238000007789 sealing Methods 0.000 claims description 5
- 238000013507 mapping Methods 0.000 claims description 3
- 230000017525 heat dissipation Effects 0.000 abstract description 4
- 238000002474 experimental method Methods 0.000 abstract description 2
- 230000006855 networking Effects 0.000 abstract description 2
- 230000007306 turnover Effects 0.000 abstract 1
- 238000005516 engineering process Methods 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000033228 biological regulation Effects 0.000 description 1
Images
Classifications
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F16—ENGINEERING ELEMENTS AND UNITS; GENERAL MEASURES FOR PRODUCING AND MAINTAINING EFFECTIVE FUNCTIONING OF MACHINES OR INSTALLATIONS; THERMAL INSULATION IN GENERAL
- F16M—FRAMES, CASINGS OR BEDS OF ENGINES, MACHINES OR APPARATUS, NOT SPECIFIC TO ENGINES, MACHINES OR APPARATUS PROVIDED FOR ELSEWHERE; STANDS; SUPPORTS
- F16M11/00—Stands or trestles as supports for apparatus or articles placed thereon ; Stands for scientific apparatus such as gravitational force meters
- F16M11/02—Heads
- F16M11/04—Means for attachment of apparatus; Means allowing adjustment of the apparatus relatively to the stand
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F16—ENGINEERING ELEMENTS AND UNITS; GENERAL MEASURES FOR PRODUCING AND MAINTAINING EFFECTIVE FUNCTIONING OF MACHINES OR INSTALLATIONS; THERMAL INSULATION IN GENERAL
- F16M—FRAMES, CASINGS OR BEDS OF ENGINES, MACHINES OR APPARATUS, NOT SPECIFIC TO ENGINES, MACHINES OR APPARATUS PROVIDED FOR ELSEWHERE; STANDS; SUPPORTS
- F16M11/00—Stands or trestles as supports for apparatus or articles placed thereon ; Stands for scientific apparatus such as gravitational force meters
- F16M11/20—Undercarriages with or without wheels
- F16M11/24—Undercarriages with or without wheels changeable in height or length of legs, also for transport only, e.g. by means of tubes screwed into each other
- F16M11/26—Undercarriages with or without wheels changeable in height or length of legs, also for transport only, e.g. by means of tubes screwed into each other by telescoping, with or without folding
- F16M11/28—Undercarriages for supports with one single telescoping pillar
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F1/00—Details not covered by groups G06F3/00 - G06F13/00 and G06F21/00
- G06F1/16—Constructional details or arrangements
- G06F1/20—Cooling means
Landscapes
- Engineering & Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Mechanical Engineering (AREA)
- Theoretical Computer Science (AREA)
- Human Computer Interaction (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a network space intelligent detection asset device, which comprises a chassis, wherein a protective box is arranged at the top of the chassis, one side of the top of the protective box is hinged with a turnover cover, a main case is arranged in the protective box, a fan is arranged on the outer wall of one side of the protective box, an air outlet is arranged on the outer wall of the other side of the protective box, a plurality of air guide strips arranged in parallel are arranged at the bottom of the protective box, and openings are arranged at two ends of the air guide strips, in the network space intelligent detection asset device, equipment and script deployment engineering experiments are carried out by depending on laboratories, networking equipment in the whole network range is scanned and probed, firstly, IP address libraries of relatively mature domestic and foreign operators are found out through collection, then asset detection is carried out, finally, collected asset results are stored in a database, the main case can be protected through the protective box, and high-speed movement of airflow is realized through the fan and the air guide strips, thereby guaranteeing the heat dissipation and realizing the continuous heat dissipation of the equipment.
Description
Technical Field
The invention relates to the technical field of network space asset detection, in particular to a network space intelligent asset detection device.
Background
The network asset detection refers to acquiring the device attribute information and the application attribute information of a target host by using a certain technical means, and comprises IP survivability detection, port/service detection, operating system detection, flow acquisition, alias resolution, DNS detection and application type detection, wherein a commonly used asset detector comprises Nmap, Zmap and Masscan, commonly used port scanning modes comprise SYN scanning, Connect scanning, UDP scanning, TCPFIN scanning, NULL scanning and XmasTree scanning, an optimal detection strategy is customized by combining detection source distribution, detection source configuration and application scenes in the actual detection task issuing process, the traditional asset detection technology adopts TCP packet transmission technology, the whole process relates to the establishment of TCP three-time handshake connection, the duration is long, the packet transmission quantity is large, when the request connection failure occurs, the packet discarding processing is involved, the network congestion is easily caused, and the existing asset detection equipment generates a large amount of heat during long-time use, cause the heat to be difficult to dispel to influence equipment and normally work, and equipment is not convenient for carry out the regulation of angle and height when needing to maintain, causes to maintain inconveniently.
Disclosure of Invention
The invention aims to provide a network space intelligent asset detection device to solve the problems in the background technology.
In order to achieve the purpose, the invention provides a network space intelligent asset detection device which comprises a chassis, wherein a protective box is installed at the top of the chassis, a flip cover is hinged to one side of the top of the protective box, a main case is arranged inside the protective box, a fan is installed on the outer wall of one side of the protective box, an air outlet is formed in the outer wall of the other side of the protective box, a plurality of air guide strips which are arranged in parallel are installed at the bottom of the protective box, openings are formed in two ends of each air guide strip, a fixed pipe is installed at the top of the chassis, a lifting rod is inserted into the top of the fixed pipe, and a locking bolt is installed on the outer wall of the fixed pipe.
Preferably, a sealing strip is closely adhered to the inner edge of the flip cover.
Preferably, gaps are arranged on the inner walls of the two sides of the protection box close to the main case.
Preferably, the front face of the protective box is hinged with an interface cover plate.
Preferably, the inner wall of the bottom of the air outlet is provided with an inclined plane.
Preferably, springs are externally mounted on both sides of the main cabinet.
Preferably, a network asset detection module is installed inside the mainframe box, the detection mode of the network asset detection module is active detection or passive detection, the active detection means that a data packet is actively sent to the target mainframe, the target mainframe returns a response data packet after receiving the data, and the detection mode of the target mainframe information is obtained by analyzing the response data packet; passive detection means that a network sniffer is used for acquiring data messages of a target network, and network asset information is obtained by analyzing message data; the non-invasive detection based on the search engine refers to that the network asset information is obtained by utilizing a special network security search engine for Shodan, Censys and ZoomaEye.
Preferably, the network asset detection module comprises an IP survivability detection module, a port/service detection module, an operating system detection module, a traffic collection module, an alias resolution module, a DNS detection module, and an application type detection module.
Preferably, the IP survivability detection is to identify the online host by using ARP, ICMP and TCP network protocols, the port/service detection is to screen out an open port of the online host by port scanning to acquire service information, version information and operating system information of a target host, a common asset detector is provided with Nmap, Zmap and Masscan, common port scanning modes are SYN scanning, Connect scanning, UDP scanning, TCPFIN scanning, NULL scanning and XmasTree scanning, and an optimal detection strategy is customized by combining detection source distribution, detection source configuration and application scenes in the actual detection task issuing process; alias resolution is to establish a mapping relationship between an IP address and a router when one router has multiple IP addresses, and is a key to construct a network space router-level topology structure. Common alias resolution tools include Midar, Iffinder and Kapar, DNS detection establishes a corresponding relation between an IP address and a domain name through reverse resolution of the IP address, and the DNS detection is an important basis for asset attribute identification.
Preferably, the network asset detection module comprises a network asset identification module, the network asset identification module analyzes application component information of a target network, such as forum programs and blog programs, acquires website response header data, HTML pages, special URLs, open ports and banners, generates application fingerprints, and automatically identifies Web server software, Web scripting language, service types and corresponding version model application attributes of a target host by comparing a network application component fingerprint library.
Compared with the prior art, the invention has the beneficial effects that:
1. in the device for intelligently detecting the assets in the network space, equipment and script deployment engineering experiments are carried out by depending on laboratories, networking equipment in the whole network range is scanned and probed, a relatively mature ip address library of domestic and foreign operators is found out by searching, then asset detection is carried out, and finally collected asset results are stored in a database.
2. In this assets device is surveyed to network space intelligence, can protect this mainframe box through the protective housing to realize the high-speed motion of air current through fan and wind-guiding strip, thereby guarantee the heat effluvium, realize the heat dissipation that lasts of this equipment.
3. In this assets device is surveyed to network space intelligence, can realize going up and down and rotatory through the chassis that wherein sets up, it is more convenient when maintaining in the later stage.
Drawings
FIG. 1 is a schematic view of the overall structure of the present invention;
FIG. 2 is a schematic bottom view of the protective box of the present invention;
FIG. 3 is a schematic view of the internal structure of the protective case of the present invention;
fig. 4 is a schematic structural view of the chassis of the present invention.
The various reference numbers in the figures mean:
1. a chassis; 11. a fixed tube; 12. a lifting rod; 13. locking the bolt; 2. a protective box; 21. an air outlet; 211. a bevel; 22. a fan; 23. a gap; 24. wind guide strips; 25. an opening; 26. a spring; 3. a cover is turned; 31. a sealing strip; 4. a main chassis; 41. an interface cover plate.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", "clockwise", "counterclockwise" indicate orientations or positional relationships based on those shown in the drawings, and are used merely for convenience of description and for simplicity of description, and do not indicate or imply that the device or element so referred to must have a particular orientation, be constructed in a particular orientation, and be operated, and thus should not be considered as limiting the present invention.
Example 1
The invention provides an intelligent asset detection device in a network space, which comprises a chassis 1, wherein a protective box 2 is arranged at the top of the chassis 1, a flip cover 3 is hinged to one side of the top of the protective box 2, a main case 4 is arranged inside the protective box 2, a fan 22 is arranged on the outer wall of one side of the protective box 2, an air outlet 21 is arranged on the outer wall of the other side of the protective box 2, a plurality of air guide strips 24 which are arranged in parallel are arranged at the bottom of the protective box 2, openings 25 are arranged at two ends of each air guide strip 24, a fixed pipe 11 is arranged at the top of the chassis 1, a lifting rod 12 is inserted into the top of the fixed pipe 11, and a locking bolt 13 is arranged on the outer wall of the fixed pipe 11.
In this embodiment, the sealing strip 31 is tightly adhered to the inner edge of the flip 3, so as to ensure the sealing property of the closed flip 3.
Specifically, the inner walls of the two sides of the protection box 2 are provided with gaps 23 near the mainframe box 4, so that air can flow, and heat dissipation is facilitated on the two sides.
Furthermore, the front of the protection box 2 is hinged with an interface cover plate 41, so that the connection of a data interface is conveniently opened.
Furthermore, the inner wall of the bottom of the air outlet 21 is provided with an inclined plane 211, so that sundries falling on the air outlet 21 can slide off conveniently, and the air outlet 21 is prevented from being blocked.
Furthermore, springs 26 are mounted on the outer portions of the two sides of the main cabinet 4, so that the two sides of the main cabinet 4 are tightly pressed and fixed, and sliding of the main cabinet is avoided.
Further, a network asset detection module is installed inside the main cabinet 4, the detection mode of the network asset detection module is active detection or passive detection, the active detection means that a data packet is actively sent to the target host, the target host returns a response data packet after receiving the data, and the detection mode of the target host information is obtained by analyzing the response data packet; passive detection means that a network sniffer is used for acquiring data messages of a target network, and network asset information is obtained by analyzing message data; the non-invasive detection based on the search engine refers to that the network asset information is obtained by utilizing a special network security search engine for Shodan, Censys and ZoomaEye.
Further, the network asset detection module comprises an IP survivability detection module, a port/service detection module, an operating system detection module, a traffic collection module, an alias resolution module, a DNS detection module and an application type detection module.
Furthermore, the IP survivability detection is to identify the online host by using ARP, ICMP and TCP network protocols, the port/service detection is to screen out an open port of the online host by port scanning to acquire service information, version information and operating system information of a target host, a common asset detection tool is provided with Nmap, Zmap and Masscan, common port scanning modes are SYN scanning, Connect scanning, UDP scanning, TCPFIN scanning, NULL scanning and XmasTree scanning, and an optimal detection strategy is customized by combining detection source distribution, detection source configuration and application scenes in the actual detection task issuing process; alias resolution is to establish a mapping relationship between an IP address and a router for the condition that one router has multiple IP addresses, and is a key for establishing a network space router-level topology structure.
Further, the network asset detection module comprises a network asset identification module, wherein the network asset identification module analyzes application component information of a target network, such as forum programs and blog programs, acquires website response header data, HTML pages, special URLs, open ports and banners, generates application fingerprints, and automatically identifies Web server software, Web scripting language, service types and corresponding version model application attributes of a target host by comparing a network application component fingerprint library.
When the network space intelligent detection asset device is used, the device is stably placed at first, then the main case 4 is placed inside the protective case 2, the fan 22 is opened to blow the bottom of the main case 4, when the network space intelligent detection asset device works, air at the bottom of the main case 4 flows along the air guide strip 24 and is discharged from one side, heat is guaranteed to be dissipated timely, meanwhile, the whole device is cooled, when asset detection is carried out, active detection and passive detection are simultaneously used, a data packet is sent to a target host when active detection is carried out, the target host returns a response data packet after receiving data, and a detection mode of target host information is obtained by analyzing the response data packet; when passive detection is carried out, a network sniffing tool is used for acquiring data messages of a target network, and network asset information is obtained by analyzing message data.
The foregoing shows and describes the general principles, essential features, and advantages of the invention. It will be understood by those skilled in the art that the present invention is not limited to the embodiments described above, and the preferred embodiments of the present invention are described in the above embodiments and the description, and are not intended to limit the present invention. The scope of the invention is defined by the appended claims and equivalents thereof.
Claims (10)
1. A cyberspace intelligent detection asset device, comprising a chassis (1), characterized in that: protective housing (2) are installed at the top of chassis (1), top one side of protective housing (2) articulates there is flip (3), the inside of protective housing (2) is provided with mainframe box (4), fan (22) are installed to one side outer wall of protective housing (2), the opposite side outer wall of protective housing (2) is provided with air outlet (21), a plurality of parallel arrangement's wind-guiding strip (24) are installed to the bottom of protective housing (2), the both ends of wind-guiding strip (24) are provided with opening (25), fixed pipe (11) are installed at the top of chassis (1), peg graft at the top of fixed pipe (11) has lifter (12), locking bolt (13) are installed to the outer wall of fixed pipe (11).
2. The cyberspace intelligent detection asset device according to claim 1, wherein: and a sealing strip (31) is tightly bonded at the inner side edge of the flip cover (3).
3. The cyberspace intelligent detection asset device according to claim 1, wherein: gaps (23) are formed in the inner walls of the two sides of the protection box (2) close to the main case (4).
4. The cyberspace intelligent detection asset device according to claim 1, wherein: the front surface of the protective box (2) is hinged with an interface cover plate (41).
5. The cyberspace intelligent detection asset device according to claim 1, wherein: the bottom inner wall of the air outlet (21) is provided with an inclined plane (211).
6. The cyberspace intelligent detection asset device according to claim 1, wherein: and springs (26) are arranged outside two sides of the mainframe box (4).
7. The cyberspace intelligent detection asset device according to claim 1, wherein: a network asset detection module is installed inside the mainframe box (4), the detection mode of the network asset detection module is active detection or passive detection, the active detection means that a data packet is actively sent to a target host, the target host returns a response data packet after receiving data, and the detection mode of the target host information is obtained by analyzing the response data packet; passive detection means that a network sniffer is used for acquiring data messages of a target network, and network asset information is obtained by analyzing message data; the non-invasive detection based on the search engine refers to that the network asset information is obtained by utilizing a special network security search engine for Shodan, Censys and ZoomaEye.
8. The cyberspace intelligent detection asset device according to claim 7, wherein: the network asset detection module comprises an IP survivability detection module, a port/service detection module, an operating system detection module, a flow acquisition module, an alias analysis module, a DNS detection module and an application type detection module.
9. The cyberspace intelligent detection asset device according to claim 8, wherein: the IP survivability detection is to identify an online host by utilizing ARP, ICMP and TCP network protocols, port/service detection is to screen out an open port of the online host through port scanning to obtain service information, version information and operating system information of a target host, common asset detection tools are provided with Nmap, Zmap and Masscan, common port scanning modes comprise SYN scanning, Connect scanning, UDP scanning, TCPFIN scanning, NULL scanning and XmasTree scanning, and in the actual detection task issuing process, an optimal detection strategy is customized by combining detection source distribution, detection source configuration and an application scene; alias resolution is to establish a mapping relationship between an IP address and a router for the condition that one router has multiple IP addresses, and is a key for establishing a network space router-level topology structure.
10. The cyberspace intelligent detection asset device according to claim 8, wherein: the network asset detection module comprises a network asset identification module, the network asset identification module analyzes application component information of a target network, such as a forum program and a blog program, acquires website response header data, an HTML page, a special URL, an open port and a banner, generates application fingerprints, and automatically identifies Web server software, Web scripting language, service types and corresponding version model application attributes of a target host by comparing a network application component fingerprint library.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210280583.2A CN114688407A (en) | 2022-03-22 | 2022-03-22 | Network space intelligent asset detection device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210280583.2A CN114688407A (en) | 2022-03-22 | 2022-03-22 | Network space intelligent asset detection device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN114688407A true CN114688407A (en) | 2022-07-01 |
Family
ID=82139296
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210280583.2A Pending CN114688407A (en) | 2022-03-22 | 2022-03-22 | Network space intelligent asset detection device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114688407A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115225604A (en) * | 2022-07-15 | 2022-10-21 | 北京天融信网络安全技术有限公司 | Method and device for acquiring network equipment information, electronic equipment and storage medium |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104979908A (en) * | 2015-06-25 | 2015-10-14 | 云南电网有限责任公司电力科学研究院 | Substation network online failure analysis method |
| CN207235269U (en) * | 2017-09-01 | 2018-04-13 | 刘泽宇 | A kind of communication apparatus protective housing |
| CN207801993U (en) * | 2018-01-31 | 2018-08-31 | 义乌市海源网络科技有限公司 | A kind of more power type interchangers |
| CN210491083U (en) * | 2019-12-09 | 2020-05-08 | 深圳创盈芯实业有限公司 | Set top box with detachable supporting base |
| CN211044109U (en) * | 2019-10-30 | 2020-07-17 | 广州慈育信息科技有限公司 | Microcomputer for intelligent manufacturing equipment |
| CN211427260U (en) * | 2020-04-08 | 2020-09-04 | 深圳市深玛网络科技有限公司 | Software management running device for internet network service |
| CN214409648U (en) * | 2021-04-16 | 2021-10-15 | 深圳市普惠智能实业有限公司 | Network guest control host for hotel guest room control |
| CN215066937U (en) * | 2021-04-27 | 2021-12-07 | 天津中控海容科技有限公司 | Frequency detection device of frequency converter |
| CN215264350U (en) * | 2021-07-16 | 2021-12-21 | 德州可恩口腔医院股份有限公司 | Multifunctional projector |
-
2022
- 2022-03-22 CN CN202210280583.2A patent/CN114688407A/en active Pending
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104979908A (en) * | 2015-06-25 | 2015-10-14 | 云南电网有限责任公司电力科学研究院 | Substation network online failure analysis method |
| CN207235269U (en) * | 2017-09-01 | 2018-04-13 | 刘泽宇 | A kind of communication apparatus protective housing |
| CN207801993U (en) * | 2018-01-31 | 2018-08-31 | 义乌市海源网络科技有限公司 | A kind of more power type interchangers |
| CN211044109U (en) * | 2019-10-30 | 2020-07-17 | 广州慈育信息科技有限公司 | Microcomputer for intelligent manufacturing equipment |
| CN210491083U (en) * | 2019-12-09 | 2020-05-08 | 深圳创盈芯实业有限公司 | Set top box with detachable supporting base |
| CN211427260U (en) * | 2020-04-08 | 2020-09-04 | 深圳市深玛网络科技有限公司 | Software management running device for internet network service |
| CN214409648U (en) * | 2021-04-16 | 2021-10-15 | 深圳市普惠智能实业有限公司 | Network guest control host for hotel guest room control |
| CN215066937U (en) * | 2021-04-27 | 2021-12-07 | 天津中控海容科技有限公司 | Frequency detection device of frequency converter |
| CN215264350U (en) * | 2021-07-16 | 2021-12-21 | 德州可恩口腔医院股份有限公司 | Multifunctional projector |
Non-Patent Citations (1)
| Title |
|---|
| 程丽君: "网络空间资产探测与分析技术研究" * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115225604A (en) * | 2022-07-15 | 2022-10-21 | 北京天融信网络安全技术有限公司 | Method and device for acquiring network equipment information, electronic equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8627477B2 (en) | Method, apparatus, and system for detecting a zombie host | |
| CN114584401B (en) | Tracing system and method for large-scale network attack | |
| US6968377B1 (en) | Method and system for mapping a network for system security | |
| TW470879B (en) | Information security analysis system | |
| US7623466B2 (en) | Symmetric connection detection | |
| CN111756598A (en) | Asset discovery method based on combination of active detection and flow analysis | |
| CN102082690B (en) | Passive finding equipment and method of network topology | |
| CN101388763B (en) | SQL injection attack detection system supporting multiple database types | |
| Nawrocki et al. | Uncovering vulnerable industrial control systems from the internet core | |
| US20060083180A1 (en) | Packet analysis system | |
| CN106230800A (en) | A kind of to assets active probe with the method for leak early warning | |
| MXPA01000774A (en) | Information security analysis system. | |
| CN114688407A (en) | Network space intelligent asset detection device | |
| CN111083117A (en) | Botnet tracking and tracing system based on honeypots | |
| MXPA01000775A (en) | Information security analysis system. | |
| CN112054911A (en) | Intelligent equipment multi-way investigation evidence obtaining device based on Internet of things | |
| Vaarandi | Detecting anomalous network traffic in organizational private networks | |
| CN113438332B (en) | DoH service identification method and device | |
| CN114598499A (en) | Network risk behavior analysis method combined with business application | |
| Nie et al. | Intrusion detection using a graphical fingerprint model | |
| Iannaccone et al. | CoMo: An open infrastructure for network monitoring–research agenda | |
| CN115437874A (en) | Information security risk analysis and monitoring system based on network assets | |
| US8654127B2 (en) | Method, device arrangement and computer program product for producing identity graphs for analyzing communication network | |
| CN111343008B (en) | Comprehensive measurement method and system for discovering IPv6 accelerated deployment state | |
| TWI685231B (en) | Packet classification method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20220701 |