Internet security incidents are frequent, the forms of attacks against Internet business systems are diversified, and the traditional defense means can hardly meet the growing security protection needs. This paper proposes a new system based on cyberspace asset discovery and identification method, which contains five layers: data collection layer, data aggregation layer, data storage layer, permission control layer and web display layer, to comprehensively and accurately sort out the network assets, clearly grasp the attack surface exposed assets, and effectively manage and protect the cyberspace for security.