Network security intelligence collection method, device, equipment and storage medium

Abstract

The invention discloses a network security intelligence collection method. The method comprises the steps: starting a web crawler according to a received collection instruction, carrying out the information crawling through the web crawler, and obtaining a network security intelligence resource; classifying the network security intelligence resources to obtain text files and non-text files; calling a file conversion tool according to the file type of the non-text file, and converting the non-text file into a text file by utilizing the file conversion tool; performing information extraction onthe text file according to a preset information standard format specification to obtain target content; standardizing the target content through a preset standardized data generation model to obtain standardized network security information. According to the method, the network security intelligence on the Internet can be continuously acquired on a large scale. The information acquisition efficiency is effectively improved. The invention further discloses a network security intelligence acquisition device, equipment and a computer readable storage medium, which all have the above beneficial effects.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a network security information collection method, and also to a network security information collection device, equipment, and computer-readable storage medium. Background technique [0002] Cyber ​​security defense and threat intelligence early warning are becoming one of the important tasks in various industries. The first priority of building a high wall of information security defense is to obtain accurate and reliable cyber security threat intelligence. Cyber ​​Threat Intelligence (Cyber ​​Threat Intelligence) refers to network-oriented Intelligence information in the security field can analyze specific attack methods and identify malicious software and Trojan horses through intelligence. Therefore, collecting network security intelligence, on the one hand, can understand the development trend of network security threats, and help to formulate countermeasu...

AI Technical Summary

Problems solved by technology

[0004] With the advent of the 5G era and the development of mobile Internet and multimedia technologies, in addition to traditional text, some intelligence information also exists in the form of pictures or videos. These unstructured data often need to be processed by professionals with knowledge of network security. Only after artificial extraction and summarization can it be used to formulate the security protection strategy of the system. This human-based intelligence collection mode lacks continuity, high cost and low efficiency, and cannot cope with the increasingly large-scale big data intelligence information.

Moreover, artificial intelligence information often lacks a standardized structure, and cannot be directly used for follow-up intelligent analysis of network security like the structured data of security logs generated by security devices such as IPS, IDS, and firewalls.

Images