| In various security management activities,the management of information assets is the starting point of security management activities,providing background and foundation for various security management activities.At present,there are problems such as asset size expansion,difficulty in asset type identification,and disproportionate management tools and management requirements in information asset management.In order to improve the informatization level of information asset management in a city tax bureau,this paper designs and implements a set of information asset management information system The main contents of this paper are as follows:Firstly,aiming at the problem of difficult identification of information asset types,an automatic identification method of information assets based on classification model is proposed.This method acquires detailed assets including host name,IP address,open port,service detection information and other information through network scanning technology.Information,and manually label the asset type of its as a training set,train the classification model with this sample set,comprehensively consider multiple evaluation indicators,and select the model with better classification performance as the classifier used by the information asset management system.After discovering the new information assets,the scanner is called to perform detailed scanning to obtain new asset data.After pre-processing,the trained classifier predicts and obtains the classification prediction result of the newly added assets.Secondly,in view of the problem that the existing information asset management tools can not meet the requirements of information asset management,analyze the information asset management needs of a city tax bureau,and determine the overall objectives,feasibility studies,functional requirements and non-functional requirements of the information asset management system.A complete information asset management system is implemented using J2EE technology.After the coding is completed,test cases are written to test the system.The test results show that the system can realize the discovery and automatic identification of network assets and the management of various asset information. |
