Attack surface identification method and device, equipment and storage medium

• Main Authors: WANG AO, WU YOUYANG
• Format: Patent
• Language: Chinese; English
• Published: 02.06.2023
• Subjects: ELECTRIC COMMUNICATION TECHNIQUE; ELECTRICITY; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The invention discloses an attack surface identification method and device, equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: obtaining to-be-cleaned traffic data obtained after the mirroring of traffic data in preset network equipment through traffic probe equipment, performing data cleaning operation on the to-be-cleaned traffic data to obtain cleaned traffic data; extracting exposed asset information from the cleaned flow data, and identifying the cleaned flow data to obtain an exposed asset type; and determining corresponding exposed assets according to the exposed asset information and the exposed asset type, and constructing a corresponding attack surface based on all the identified exposed assets. According to the method and the device, the corresponding exposed assets are determined by extracting and identifying the traffic data under the condition that a request is not initiated, so that the attack surface is constructed, the n