Network threat discovery method

Abstract

The invention discloses a network threat discovery method. The network threat discovery method comprises the steps of vulnerability information monitoring, information analysis and abnormal information capture. Wherein normalization monitoring is carried out on public network vulnerability release information through vulnerability information monitoring, classification and early warning are carried out on potential novel threat information hidden in an information text through information analysis, and network threat capturing and early warning are carried out on Web abnormal behaviors throughabnormal information capturing. According to the network threat discovery method provided by the invention, network threat early warning is effectively realized from multiple channels, particularly,a security threat entry vector model can be established through information analysis, the network threat discovery method has machine learning and updating capabilities on security threat information,and the situation awareness capability and the early warning prevention and control capability of network threat are greatly improved.

Description

technical field [0001] The invention belongs to the technical field of computer network security, in particular to a method for discovering network threats. Background technique [0002] The life cycle of a network security vulnerability can be divided into latent, growth, spread, outbreak, and recession stages. Generally, when it is known to the public, it has reached the stage of spread, outbreak, and decline. At this time, security vulnerabilities have often begun to cause substantial damage to security subjects sexual hazards. [0003] Network security early warning is to be able to conduct early discovery, early warning and early protection of potential network vulnerabilities or network threats from multiple angles and aspects, so as to overcome the shortcomings of using a single technical means for network threat early warning in the existing technology. Contents of the invention [0004] The technical problem mainly solved by the present invention is to provide a ...

AI Technical Summary

Problems solved by technology

[0004] The technical problem mainly solved by the present invention is to provide a network threat discovery method, which solves the technical problems in the prior art that the network threat discovery method is single, lacks early warning and monitoring, and does not have intelligent learning to discover new threats

Images