A method and device for generating an internet protocol ip reputation database

Abstract

The invention discloses an Internet protocol (IP) credibility library generation method and an IP credibility library generation device, and relates to the technical field of network security. The method comprises the steps of periodically acquiring an access log generated by each IP message; determining IP identifier information corresponding to the access log; determining the parameter value of each credibility element of the same IP identifier information from an access log corresponding to the IP identifier information; determining the credibility value of the IP identifier information according to the parameter value of each credibility element and the parameter grade of each credibility element. According to the method and the device provided by the embodiment of the invention, the credibility elements in the access log are parameterized and the parameter grades of the credibility elements are different, the credibility value of the IP identifier information is determined according to the parameter value of each credibility element and the parameter grade of each credibility element, the parameter information in the access log generated by the IP message as well as the grade of each parameter when the credibility value is computed by using the parameter information are considered, so that the determined credibility of the IP identifier is more accurate.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and device for generating an Internet Protocol IP reputation database. Background technique [0002] With the continuous development of network technology, the Internet has penetrated into all aspects of people's lives, and the Internet has become more and more closely related to our work and life. E-commerce, online transactions, online banking, etc. are increasingly dependent on the Internet. At the same time, people's constant dependence on the Internet also allows criminals to see the benefits they can seek, causing various network security incidents to emerge in endlessly. While the Internet brings great convenience and changes, it also carries risks. External threat attacks are becoming more and more frequent, and the attack methods are becoming more and more advanced, all of which pose a major threat to security. [0003] Facing the threat of cyber att...

AI Technical Summary

Problems solved by technology

[0006] The present invention provides a method and device for generating an Internet Protocol IP reputation database, which is used to solve the problem that the prior art cannot provide a method for determining an IP reputation database, and is used to accurately determine whether an IP address is a suspicious or malicious IP.

Images