Attack surface management method and system, electronic equipment and readable storage medium

The invention relates to an attack surface management method and system, electronic equipment and a readable storage medium, and the method comprises the steps: obtaining a known asset library and a cloud asset library, the known asset library comprises a plurality of known assets, and the cloud asset library comprises a plurality of cloud assets; according to the known asset library, the cloud asset library and a preset asset matching rule, determining a target asset library, the target asset library comprising a plurality of target assets; and based on the risk determination rule, performing risk determination on the target assets in the target asset library, and when the target assets have risks, forming an asset attack surface by the target assets. The method has the effect of improving the accuracy of the asset attack surface. 本发明涉及一种攻击面管理方法、系统、电子设备及可读存储介质，其方法包括获取已知资产库和云端资产库，已知资产库包括多个已知资产，云端资产库包括多个云端资产；根据已知资产库、云端资产库和预设的资产匹配规则，确定目标资产库，目标资产库包括多个目标资产；基于风险判定规则，对目标资产库中的目标资产进行风险判定，当目标资产存在风险时，目标资产组成资产攻击面。本发明具有提