Design And Implementation Of Network Assets Identification Platform

With the rapid development of information technology,the Internet has become an inseparable part of people's lives,and all walks of life are moving towards the direction of "Internet Plus".Many enterprises and institutions have deployed network services on the Internet to facilitate people's production and life.In addition,with the development of new media,enterprises have many new channels to interact with users.For example,We Chat official accounts and mobile application are commonly used advertising media.These resources can be considered as the network assets of enterprises.With the continuous increase in the number and types of these network assets,the management difficulty and security challenges faced by enterprises are also increasing.On the one hand,if poor asset management causes some assets to become zombie assets,the asset is likely to become a malicious entry point.On the other hand,with the increase of the number of assets,it may also bring some potential risks,such as possible code violations uploaded to the Git Hub repositories resulting in information leakage,phishing websites pretend to be corporate services to defraud customer information,etc.This platform is based on the above problems,discovering and identifying customers' network assets,promptly alerting to potential risks,and help protect the information security of enterprises.The project is positioned as a platform that provides network asset identification results to the outside.Customers can start asset identification tasks by providing only a small amount of original information,and then provide the discovered network asset information to customers in the form of reports.The platform provides services on the web,and the operation personnel handle specific customer tasks.The platform is divided into the following modules according to the general process of asset identification: customer and task management module,information upload and display module,asset discovery module,automatic identification cause module,risk discovery module,asset recognition module,and mail management module.Through the development of these modules,the process of customer asset information from discovery,identification to delivery is realized,helping customers to manage their own assets and ensuring the safety of network assets.This article talks about the development background and target business of the platform,introduces the requirements that the platform should achieve,and then carries out the outline design and detailed design of the platform.After the platform is implemented,it conducts corresponding tests against the existing requirements to verify that the platform can meet the requirements.The project implementation uses VUE as the front-end framework,and Django + Nginx + u WSGI as the back-end framework,which realizes the separation of the front and back ends,facilitating the rapid development of functions and the migration of the environment.The databases used are the relational database My SQL and the distributed database Elasticsearch.At present,the platform has been put into formal use,helping many customers to manage assets and solving many potential security issues.