CN106685707A - Asset information control method in a distributed infrastructure system - Google Patents

Abstract

The invention discloses an asset information control method in a distributed infrastructure system. The method comprises the following steps of establishing an RDF model and collecting original data of a system asset; instantiating the original data of the asset in the system and carrying out data association on asset instances in acquired data sets; through calculating a similarity of asset instances among the data sets, acquiring all the asset instances corresponding to the same asset, and carrying out data association; and according to a data association relation, merging the data sets and generating an RDF graph. In the invention, a lot of data from a plurality of data sources is fused, a unified formal is reached and the RDF graph is used to describe the distributed infrastructure system so that problems that a traditional registration mode is not suitable for a large scale system and information is limited are solved; and abundant and various information is provided for asset management and data bases are provided for subsequent safety management and other applications. The asset information control method in the distributed infrastructure system can be widely applied to the infrastructure management control field.

Description

Asset information control method in a distributed infrastructure system

technical field

The invention relates to the field of infrastructure management and control, in particular to an asset information control method in a distributed infrastructure system.

Background technique

The computer in the distributed infrastructure system is different from the traditional desktop computer. The traditional computer is a computer with a fixed operating system and IP address. In the distributed infrastructure system, virtual machines can be dynamically generated according to demand. , the functions and effects presented to users by these virtual machines through the interface are just like an ordinary computer, with an operating system, an IP address to access the Internet, and so on. There are a large number of assets in a large-scale distributed infrastructure system, such as virtual machines, switches, routers, services, etc., so it is necessary to manage the assets in the system and grasp the composition, quantity, and attributes of the assets in the entire system. , in order to carry out corresponding configuration management on the whole system.

For the acquisition of asset information in the system and asset management, the existing practice is to use the registration method to collect and manage asset information in the system, and the staff registers the attribute configuration and other information of each asset one by one. For a large-scale distributed infrastructure system, the number of assets is huge, there are many types, and the attributes of the assets are easy to change. The most important thing is that the assets will be dynamically produced according to the needs. If the manual registration method is used, it needs to be performed frequently Register operations and only have very limited information about assets.

Contents of the invention

In order to solve the above technical problems, the object of the present invention is to provide a method for controlling large-scale and dynamic asset information in a distributed infrastructure system.

The technical solution adopted in the present invention is: a method for controlling asset information in a distributed infrastructure system, including the following steps:

A. Establish RDF model and collect raw data of system assets;

B. Instantiate the raw data of assets in the system to obtain asset instance data sets;

C. Data association of asset instances in the data set;

D. By calculating the similarity of asset instances between data sets, all asset instances corresponding to the same asset are obtained, and the asset instances between data sets are associated with data;

E. Merge data sets according to data association relationship and generate RDF graph.

Further, the step A specifically includes: establishing an empty RDF model and importing the security ontology into the model, and collecting the original data of system assets.

Further, the step B is specifically: converting the asset name or ID of the original asset data in the system into an instance of the class to which the asset belongs through the semantic web, and all the original data of the instance are asset instance data sets.

Further, the step C specifically includes: performing data association according to the object attributes of known asset instances in the data set.

Further, the step C specifically further includes: performing data association according to the numerical attributes of known asset instances in the data set.

Further, the step E is specifically: according to the data association relationship, merge all asset instances of the same asset in all data sets into an asset instance node in the RDF graph, and associate the object attributes and numerical attributes of all asset instances of the same asset above Go to the asset instance and generate an RDF graph.

The beneficial effects of the present invention are: the present invention uses Semantic Web technology to integrate a large amount of data from multiple data sources, uniformly formalizes these data into the form of associated data, and uses RDF diagrams to formally describe the operation of distributed infrastructure systems situation, solve the problem that the traditional registration method is not suitable for the dynamic nature of assets in large-scale distributed infrastructure systems and the limited information, can reduce manpower input, improve management efficiency, provide rich and diverse information for asset management, and bring Semantic asset information provides a data basis for subsequent applications such as security management, which is conducive to the expansion of subsequent applications.

Description of drawings

Fig. 1 is the flow chart of the steps of the inventive method;

Fig. 2 is a schematic diagram of the formalized processing of step B;

Fig. 3 is a schematic diagram of the formalized processing of step C;

Fig. 4 is a schematic diagram of the formalized processing of step D;

Fig. 5 is a schematic diagram of the formalization process of step E.

detailed description

The specific embodiment of the present invention will be further described below in conjunction with accompanying drawing:

Referring to Fig. 1, a method for asset information control in a distributed infrastructure system includes the following steps:

A. Establish RDF model and collect raw data of system assets;

B. Instantiate the raw data of assets in the system to obtain asset instance data sets;

C. Data association of asset instances in the data set;

D. By calculating the similarity of asset instances between data sets, all asset instances corresponding to the same asset are obtained, and the asset instances between data sets are associated with data;

E. Merge data sets according to data association relationship and generate RDF graph.

As a further preferred implementation, the step A specifically includes: establishing an empty RDF model and importing the security ontology into the model, and collecting the original data of the system assets.

Security ontology includes the formal definition of assets and related security concepts in large-scale distributed infrastructure systems, so it is necessary to import security ontology into the model after building an empty RDF model.

The raw data of the assets in the above system can be collected in various ways, such as the sensor equipment on the equipment, the signal generated by the equipment itself, etc. These raw data come from different data sources, have different structures, and reflect distributed data from different angles. Information about infrastructure systems, for example, data from vulnerability scanning tools can reflect the vulnerability of distributed infrastructure systems, while log information records the corresponding events and operating conditions of distributed infrastructure systems.

Linked Data in the Semantic Web technology is to associate data from different data sources. Therefore, according to the security ontology, the collected original data is semantically transformed into Linked Data (associated data) with semantics. Each data set is semanticized first, and then the data between the data sets are associated after the semantics of the data sets, so as to establish associations between data describing the same entity in different data sets, and discover the association relationship.

Therefore, as a further preferred implementation, the step B is specifically: converting the asset name or ID of the original asset data in the system into an instance (Individuals) of the class (Class) to which the asset belongs through the Semantic Web, and all of the instances The raw data is the asset instance dataset.

For example, the original data has an IP node 129.1.1.1, and this node belongs to the Host class in the ontology, so this node is an instance of the Host class. Each asset instance dataset includes asset instances and/or text attributes. As shown in FIG. 2 , A-E in datasets D1-D3 represent asset instances, and S represents text attributes.

As a further preferred implementation manner, the step C specifically includes: performing data association according to object attributes of known asset instances in the data set.

Based on the security ontology, instantiate the relationship between known asset instances in the data set, that is, object properties (ObjectProperty), and associate asset instances.

As a further preferred implementation manner, the step C specifically further includes: performing data association according to the numerical attributes of known asset instances in the data set.

In addition, the numerical attribute (DataProperty) of the asset instance is also instantiated to enrich the attribute information of the asset instance. On this basis, more implicit relationships can be obtained according to the inference rules. When an asset instance has rich associations, it is possible to easily obtain a variety of information and relationships related to the asset instance, which is conducive to a more comprehensive grasp of the security situation of the asset. As shown in Figure 3, the solid line is used to represent the association relationship between asset instances, and the dotted line is used to represent the text attribute association of asset instances.

Since each data set comes from different scanning tools or security devices, they are likely to have the data of a certain asset at the same time, so asset instances are generated for the same asset entity in different data sets. Each asset instance describes the status of the asset from different angles, and has different object attributes and numerical attributes. If all these attributes are integrated, the information describing this asset entity will be more comprehensive and multi-angle. It is necessary to associate the description All asset instances of the same asset entity, so step D finds all asset instances describing the same asset entity in each dataset by calculating the similarity of asset instances between datasets, and associates these asset instances with owl:sameAs to obtain the corresponding All asset instances of , and perform data association between asset instances between datasets.

Step E, based on the owl:sameAs association established in step D above, merges all asset instances describing the same asset entity into one asset instance node in the RDF graph, reducing the scale of the RDF graph while maintaining the amount of information.

As a further preferred implementation, the step E is specifically: according to the data association relationship, merge all asset instances of the same asset in all data sets into an asset instance node in the RDF graph, and combine the objects of all asset instances of the same asset above Attributes and numerical attributes are associated with the asset instance, and an RDF graph is generated, so that all the information describing the asset entity can be centrally associated with an asset instance, thereby deduplicating the instance more effectively.

The above is a specific description of the preferred implementation of the present invention, but the invention is not limited to the described embodiments, and those skilled in the art can also make various equivalent transformations or replacements without violating the spirit of the present invention. These equivalent modifications or replacements are all within the scope defined by the claims of the present application.

Claims (6)

1. A method for asset information control in a distributed infrastructure system, characterized in that it comprises the following steps: A. Establish RDF model and collect raw data of system assets; B. Instantiate the raw data of assets in the system to obtain asset instance data sets; C. Data association of asset instances in the data set; D. By calculating the similarity of asset instances between data sets, all asset instances corresponding to the same asset are obtained, and the asset instances between data sets are associated with data; E. Merge data sets according to data association relationship and generate RDF graph. 2. The asset information control method in a distributed infrastructure system according to claim 1, characterized in that: said step A specifically includes: establishing an empty RDF model and importing the security ontology into the model, and collecting Raw data for system assets. 3. The asset information control method in a distributed infrastructure system according to claim 2, characterized in that: the step B is specifically: converting the asset name or ID of the original asset data in the system through the Semantic Web become an instance of the class to which the asset belongs, and all the original data of the instance are asset instance datasets. 4. The asset information control method in a distributed infrastructure system according to claim 2, wherein the step C specifically comprises: performing data association according to object attributes of known asset instances in the data set. 5. The asset information control method in a distributed infrastructure system according to claim 4, characterized in that: said step C specifically further comprises: performing data association according to the numerical attributes of known asset instances in the data set. 6. The asset information control method in a distributed infrastructure system according to claim 5, characterized in that: the step E is specifically: according to the data association relationship, all asset instances of the same asset in all data sets are merged into An asset instance node in the RDF graph, and associate the object attributes and value attributes of all asset instances of the same asset above with the asset instance, and generate an RDF graph.