网络安全攻防视角下的资产安全运营研究

打开文本图片集

摘要：本文结合攻防双方的技术特点，从攻击视角和安全运营视角出发，将主动探测、搜索引擎多接口探测技术和被动探测技术相结合，实现了资产自动化探测、自动化攻击面挖掘和攻击面生命周期管理，有效解决了资产探测分析和攻击面管理难的问题，降低公司网络安全运营风险。

关键词：网络安全；攻防视角；资产探测；指纹识别；攻击面；资产安全运营

doi：10.3969/J.ISSN.1672-7274.2025.03.041

中图分类号：TP 393.08          文献标志码：B            文章编码：1672-7274（2025）03-0-03

Research on Asset Security Operation from the Perspective

of Network Security Attack and Defense

TENG Kaiqing， ZENG Zhelin， ZHANG Cheng， LIU Sipeng

（China United Network Communications Co.， Ltd. Fujian Branch， Fuzhou 350001， China）

Abstract： The article combines the technical characteristics of both the attack and defense sides， and from the perspectives of attack and security operations， combines active detection， search engine multi interface detection technology， and passive detection technology to achieve automated asset detection， automated attack surface mining， and attack surface lifecycle management capabilities， effectively solving the problem of difficult asset detection analysis and attack surface management， and reducing the company's network security operation risks.

Keywords： network security; offensive and defensive perspective; asset detection; fingerprint recognition; attack surface; asset security operation

1   研究背景

在当今数字化时代，企业的创新与进步为民众提供了多元产品和服务，促进了社会经济的持续稳定发展。（剩余3688字）