Internet protocol (IP) credibility library generation method and device

Abstract

The invention discloses an Internet protocol (IP) credibility library generation method and an IP credibility library generation device, and relates to the technical field of network security. The method comprises the steps of periodically acquiring an access log generated by each IP message; determining IP identifier information corresponding to the access log; determining the parameter value of each credibility element of the same IP identifier information from an access log corresponding to the IP identifier information; determining the credibility value of the IP identifier information according to the parameter value of each credibility element and the parameter grade of each credibility element. According to the method and the device provided by the embodiment of the invention, the credibility elements in the access log are parameterized and the parameter grades of the credibility elements are different, the credibility value of the IP identifier information is determined according to the parameter value of each credibility element and the parameter grade of each credibility element, the parameter information in the access log generated by the IP message as well as the grade of each parameter when the credibility value is computed by using the parameter information are considered, so that the determined credibility of the IP identifier is more accurate.

Description

Technical field [0001] The present invention relates to the technical field of network security, in particular to a method and device for generating an Internet protocol IP reputation database. Background technique [0002] With the continuous development of network technology, the Internet has penetrated into all aspects of people's lives, and the Internet has become more and more closely related to our work and life. E-commerce, online transactions, and online banking are increasingly dependent on the Internet. At the same time, people's constant reliance on the Internet also allows criminals to see the benefits that can be obtained, which makes various network security incidents emerge in an endless stream. While the Internet brings great convenience and changes, it also contains risks. External threats are becoming more frequent and the means of attack are becoming more advanced, all of which pose a major threat to security. [0003] Faced with the threat of cyber attacks, i...

AI Technical Summary

Problems solved by technology

[0006] The present invention provides a method and device for generating an Internet Protocol IP reputation database, which is used to solve the problem that the prior art cannot provide a method for determining an IP reputation database, and is used to accurately determine whether an IP address is a suspicious or malicious IP.

Images