網(wǎng)絡(luò)安全攻防視角下的資產(chǎn)安全運(yùn)營研究

打開文本圖片集

摘要：本文結(jié)合攻防雙方的技術(shù)特點(diǎn)，從攻擊視角和安全運(yùn)營視角出發(fā)，將主動(dòng)探測(cè)、搜索引擎多接口探測(cè)技術(shù)和被動(dòng)探測(cè)技術(shù)相結(jié)合，實(shí)現(xiàn)了資產(chǎn)自動(dòng)化探測(cè)、自動(dòng)化攻擊面挖掘和攻擊面生命周期管理，有效解決了資產(chǎn)探測(cè)分析和攻擊面管理難的問題，降低公司網(wǎng)絡(luò)安全運(yùn)營風(fēng)險(xiǎn)。

關(guān)鍵詞：網(wǎng)絡(luò)安全；攻防視角；資產(chǎn)探測(cè)；指紋識(shí)別；攻擊面；資產(chǎn)安全運(yùn)營

doi：10.3969/J.ISSN.1672-7274.2025.03.041

中圖分類號(hào)：TP 393.08          文獻(xiàn)標(biāo)志碼：B            文章編碼：1672-7274（2025）03-0-03

Research on Asset Security Operation from the Perspective

of Network Security Attack and Defense

TENG Kaiqing， ZENG Zhelin， ZHANG Cheng， LIU Sipeng

（China United Network Communications Co.， Ltd. Fujian Branch， Fuzhou 350001， China）

Abstract： The article combines the technical characteristics of both the attack and defense sides， and from the perspectives of attack and security operations， combines active detection， search engine multi interface detection technology， and passive detection technology to achieve automated asset detection， automated attack surface mining， and attack surface lifecycle management capabilities， effectively solving the problem of difficult asset detection analysis and attack surface management， and reducing the company's network security operation risks.

Keywords： network security; offensive and defensive perspective; asset detection; fingerprint recognition; attack surface; asset security operation

1   研究背景

在當(dāng)今數(shù)字化時(shí)代，企業(yè)的創(chuàng)新與進(jìn)步為民眾提供了多元產(chǎn)品和服務(wù)，促進(jìn)了社會(huì)經(jīng)濟(jì)的持續(xù)穩(wěn)定發(fā)展。（剩余3688字）