網(wǎng)絡(luò)安全攻防視角下的資產(chǎn)安全運營研究
打開文本圖片集
摘要：本文結(jié)合攻防雙方的技術(shù)特點，從攻擊視角和安全運營視角出發(fā)，將主動探測、搜索引擎多接口探測技術(shù)和被動探測技術(shù)相結(jié)合，實現(xiàn)了資產(chǎn)自動化探測、自動化攻擊面挖掘和攻擊面生命周期管理，有效解決了資產(chǎn)探測分析和攻擊面管理難的問題，降低公司網(wǎng)絡(luò)安全運營風(fēng)險。
關(guān)鍵詞：網(wǎng)絡(luò)安全；攻防視角；資產(chǎn)探測；指紋識別；攻擊面；資產(chǎn)安全運營
doi：10.3969/J.ISSN.1672-7274.2025.03.041
中圖分類號：TP 393.08 文獻標(biāo)志碼：B 文章編碼：1672-7274（2025）03-0-03
Research on Asset Security Operation from the Perspective
of Network Security Attack and Defense
TENG Kaiqing， ZENG Zhelin， ZHANG Cheng， LIU Sipeng
（China United Network Communications Co.， Ltd. Fujian Branch， Fuzhou 350001， China）
Abstract： The article combines the technical characteristics of both the attack and defense sides， and from the perspectives of attack and security operations， combines active detection， search engine multi interface detection technology， and passive detection technology to achieve automated asset detection， automated attack surface mining， and attack surface lifecycle management capabilities， effectively solving the problem of difficult asset detection analysis and attack surface management， and reducing the company's network security operation risks.
Keywords： network security; offensive and defensive perspective; asset detection; fingerprint recognition; attack surface; asset security operation
1 研究背景
在當(dāng)今數(shù)字化時代，企業(yè)的創(chuàng)新與進步為民眾提供了多元產(chǎn)品和服務(wù)，促進了社會經(jīng)濟的持續(xù)穩(wěn)定發(fā)展。（剩余3688字）