Construction method of virtual identity knowledge graph for network threat discovery

Abstract

The invention discloses a method for constructing a virtual identity knowledge map oriented to network threat discovery, which belongs to the field of network virtual identity tracking. The technical problem to be solved is how to reduce the time for collecting virtual identity information so as to improve the efficiency of network tracking and traceability; The steps are: (1) Collecting the virtual identity information of users through various means, including: collecting user registration information on different Internet websites; directional crawling of user personal data disclosed in designated websites; crawling of users’ virtual identity information based on search engines. Identity information; (2), combine multiple sets of user registration information in the user registration information table to generate data table I, (3), combine data table I and user personal data table to generate data table II; (4), combine virtual The identity information table and data table II are combined to generate a virtual identity knowledge graph. Find identity information through virtual identity knowledge graph, reduce the time of collecting virtual identity information, and improve the efficiency of network traceability.

Description

technical field [0001] The invention relates to the field of network virtual identity tracking, in particular to a method for constructing a virtual identity knowledge map oriented to network threat discovery. Background technique [0002] Faced with the increasing number of network security incidents, it is difficult to deter and attack attackers only by relying on passive technical means to protect and detect deliberate network intrusions and attacks. To locate the attackers and implement corresponding punishments or sanctions, only then can network attackers be effectively contained. At present, the method of network traceability is mainly to collect the virtual identity information related to the fingerprint from the Internet after finding the fingerprint of the attacker in the network attack event, which usually takes a lot of time. How to reduce the time of collecting virtual identity information to improve the efficiency of network traceability has become an urgent p...

AI Technical Summary

Problems solved by technology

At present, the method of network traceability is mainly to collect the virtual identity information related to the fingerprint from the Internet after finding the fingerprint of the attacker in a network attack event, which usually takes a lot of time

Images