摘要
随着物联网的快速发展,用户局域网中往往运行着数量众多的终端及哑终端。为了精准测绘及管理局域网的网络空间地图,管理者需要实时了解知悉网络空间中每个资产的具体位置。基于资产探测的成果,通过安全外壳协议交互、简单网络管理协议服务、网络资产测绘相结合的方式探究交换机端口属性,完成交换机级联端口精准识别,为绘制网络空间拓扑及交换机端口级的准入管控提供精准数据。
With the rapid development of the Internet of Things(IoT),there are often a large number of terminals and dumb terminals running on user’s LAN(Local Area Network).In order to accurately map and manage the cyberspace of a LAN,managers need to know the exact position of each asset in the cyberspace in real time.Based on the results of asset detection,this paper explores the port properties of switches by combining SSH(Secure Shell),SNMP(Simple Network Management Protocol)and network asset mapping,and completes the switch cascade port accurate identification,which provides accurate data for drawing network space topology and access control at the switch port level.
作者
郑睿
唐桥丹
倪琛
范竞丹
ZHENG Rui;TANG Qiaodan;NI Chen;FAN Jingdan(No.30 Institute of CETC,Chengdu Sichuan 610041,China)
出处
《信息安全与通信保密》
2024年第3期68-76,共9页
Information Security and Communications Privacy
关键词
级联端口
端口属性
网络资产测绘
精准识别
cascading port
port property
network asset mapping
accurate identification