面向攻击面收敛的网络安全风险治理研究OA

In view of the dynamic changes of the organization's network attack surface and the fact that the defender's perspective can't effec-tively identify the hacker's attack means,based on the multidimensional attacker's perspective,an attack surface convergence management sys-tem with the process of"asset management,attack surface identification and risk value calculation,attack surface repair and closed-loop verifi-cation,network traffic collection and real-time monitoring and analysis"is constructed to effectively realize the"safe left shift".The known as-sets and shadow assets are included in the scope of custody,and the risk quantification and classification and closed-loop verification of security vulnerabilities are integrated.Continuous monitoring is enabled to detect asset changes in real time and take measures.The practice results show that after introducing the collaborative analysis of network traffic and threat intelligence,the number of security incidents hit by threat in-telligence has gradually decreased;the non essential exposure surfaces of websites and ports have been effectively monitored and responded to,and the average exposure time has been significantly shortened from several days to less than one hour.The attack surface management technol-ogy effectively alleviates the asymmetry of attack and defense,and improves the overall visibility and risk control efficiency of the organization in the network attack surface.