The continuous discovery, inventory, classification and monitoring of an organization's IT infrastructure. The term may sound similar to asset discovery and asset management, but ASM approaches these and other security tasks from an attacker's perspective.