Threat intelligence processing method and apparatus

Abstract

Embodiments of the invention disclose a threat intelligence processing method and apparatus. The method comprises the steps of obtaining threat index IOC data of multisource intelligence, and preprocessing the IOC data to obtain to-be-analyzed data; inputting the to-be-analyzed data to a threat intelligence detection model for performing detection to obtain a threat detection result; and if the to-be-analyzed data is judged to be threat intelligence according to the threat detection result, sending the threat detection result to a display terminal for performing display. The apparatus comprises a data preprocessing module, a data detection module and a result display module. According to the threat intelligence processing method and apparatus, the threat index data of the multisource intelligence is obtained and is preprocessed and detected to obtain the threat detection result, and after the threat intelligence is determined, the threat detection result is sent to the display terminalfor performing display, so that the timeliness and the coverage rate of malicious IP detection and malicious file searching and killing are ensured.

Description

technical field [0001] Embodiments of the present invention relate to the technical field of data security, and in particular to a method and device for processing threat information. Background technique [0002] With the continuous development of the Internet, the way of information security attacks has changed into "precise and targeted attacks". These attacks will collect accurate information on the target before the attack, actively dig out the relevant vulnerabilities of the target, and then choose the opportunity to attack the target. Therefore, how to provide accurate and timely early warning of possible attacks before an attack occurs has become an urgent security issue for enterprises today. [0003] At present, there are various defense methods to deal with the hacker's intrusion. For example, security software such as NetShield, anti-virus software, security guard, and network bodyguard can resist hacker intrusions to a certain extent and maintain network secur...

AI Technical Summary

Problems solved by technology

[0004] However, in the process of realizing the present invention, the inventor found that the above-mentioned security software in the prior art has at least the following problems: most of the existing security software checks and kills malicious files a...

Images