Visual attack and defense graph generation method and device, computer equipment and storage medium

Abstract

The invention belongs to the field of security monitoring, and discloses a visual attack and defense graph generation method and device, computer equipment and a storage medium, and the method comprises the steps: obtaining an attack and defense graph generation request, and obtaining each access record of a business system according to the attack and defense graph generation request; determiningthe access record meeting the preset condition as an abnormal access record; acquiring a corresponding attack source IP and an attacked point IP based on each abnormal access record; obtaining latitude and longitude corresponding to the attack source IP and latitude and longitude corresponding to the attacked point IP; and sending the latitude and longitude of the attack source IP and the latitudeand longitude of the attacked point IP to a business-level data chart, and displaying the attack source IP and the attacked point IP of each abnormal access record through the business-level data chart to obtain an attack and defense chart. By positioning the attack source and the attacked point and automatically displaying the attack source and the attacked point through the chart, the visualization effect of the network attack and defense chart and the efficiency of network security management can be improved.

Description

technical field [0001] The invention belongs to the field of security monitoring, and more specifically relates to a method, device, computer equipment and storage medium for generating a visualized attack and defense diagram. Background technique [0002] Network attack and defense mainly refers to computer anti-virus technology and technology to create destructive viruses. The specific attack and defense can be understood as: one is a hacker, the other is an anti-virus software; or one is a technology for invading a computer system, and the other is a technology for protecting a computer from being invaded. [0003] With the advent of the big data era, the network is developing towards intelligence and collaboration, and multi-step combined penetration attacks have become the main form of threatening network security, which has brought great difficulties to network security administrators. Especially in recent years, there have been more and more violent problems in netwo...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a method, device, computer equipment, and storage medium for generating a visualized attack-defense graph, so as to solve the problem of low generation efficiency of the current attack-defense graph

Images