IP credit calculation method and device, electronic equipment and medium

Abstract

The IP credit calculation method comprises the steps of performing asset scanning on Internet assets, extracting an IP address for providing service for an external network, and generating an IP assetlist; counting a first source IP address attempting to attack the intranet or successfully attacking the intranet, and generating a black IP list; collecting flow data, and preprocessing the flow data to obtain a second source IP address and a first destination IP address; when the first destination IP address does not exist in the IP asset list, judging whether a second source IP address communicating with the first destination IP address exists in a black IP list, and if yes, adding the first destination IP address into a grey list; when the first destination IP address exists in the IP asset list, determining that the first destination IP address exists, judging whether a second source IP address communicated with the first destination IP address exists in a black IP list, if yes, adding the second source IP address into a blacklist, judging whether the flow of the second source IP address communicated with the first destination IP address exceeds a threshold value, and if yes, adding the second source IP address into a grey list.

Description

technical field [0001] The present disclosure relates to the field of Internet security, in particular to an IP credit calculation method, device, electronic equipment and media. Background technique [0002] With the advent of the information age, the Internet has been deeply integrated into all aspects of economic and social life, and network security threats have also penetrated into all levels of economic society, and the importance of network security has continued to increase. [0003] At present, traditional firewalls, intrusion detection and other protective equipment focus on analyzing whether the behavior of network sessions is suspected of being attacked, but lack a complete judgment on the role (such as credit rating) of the IP address itself in network communication. Contents of the invention [0004] (1) Technical problems to be solved [0005] In view of the existing technical problems, the present disclosure proposes an IP credit calculation method, device...

AI Technical Summary

Problems solved by technology

[0003] At present, traditional firewalls, intrusion detection and other protection equipment focus on analyzing whether the behavior of network sessions is suspected of being attacked, but lack a complete judgment on the role of the IP address itself in network communication (such as credit rating)

Images