IP credit calculation method, device, electronic equipment and medium

Abstract

An IP credit calculation method, comprising: performing asset scanning on Internet assets, extracting IP addresses that provide services to the external network, and generating a list of IP assets; counting the first source IP addresses that attempt to attack or successfully attack on the internal network, and generate black IPs list; collect traffic data, preprocess the traffic data, and obtain the second source IP address and the first destination IP address; when the first destination IP address does not exist in the IP asset list, determine the communication with the first destination IP address Whether the second source IP address exists in the black IP list, if so, then add the first destination IP address to the gray list; when the first destination IP address exists in the IP asset list, judge the second Whether the source IP address exists in the black IP list, if so, then add the second source IP address to the blacklist, and judge whether the traffic of the second source IP address communicating with the first destination IP address exceeds the threshold, if so, then add the second source IP address to the blacklist The IP address is added to the gray list.

Description

technical field [0001] The present disclosure relates to the field of Internet security, in particular to an IP credit calculation method, device, electronic equipment and media. Background technique [0002] With the advent of the information age, the Internet has been deeply integrated into all aspects of economic and social life, and network security threats have also penetrated into all levels of economic society, and the importance of network security has continued to increase. [0003] At present, traditional firewalls, intrusion detection and other protective equipment focus on analyzing whether the behavior of network sessions is suspected of being attacked, but lack a complete judgment on the role (such as credit rating) of the IP address itself in network communication. Contents of the invention [0004] (1) Technical problems to be solved [0005] In view of the existing technical problems, the present disclosure proposes an IP credit calculation method, device...

AI Technical Summary

Problems solved by technology

[0003] At present, traditional firewalls, intrusion detection and other protection equipment focus on analyzing whether the behavior of network sessions is suspected of being attacked, but lack a complete judgment on the role of the IP address itself in network communication (such as credit rating)

Images