Network threat analysis method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention discloses a network threat analysis method and device, electronic equipment and a storage medium, and relates to the field of network information security. The method comprises the following steps: acquiring historical data of network equipment in a current network environment; performing semantic processing on the historical data according to a preset semantic tagtype to obtain tag data; creating a threat knowledge graph according to the label data and a stored network environment threat mode; constructing a threat analysis model through the threat knowledge graph and pre-configured threat sample data; when current data of network equipment is received, inputting the current data into the threat analysis model to obtain a threat analysis result of the current data; and updating the threat knowledge graph according to the threat analysis result. According to the method, effective fusion of artificial experience and an automatic analysis technology is realized, and the adversarial resistance and uncertainty in the field of network security can be resisted more comprehensively.

Description

technical field [0001] The invention relates to the field of network information security, in particular to a network threat analysis method, device, electronic equipment and storage medium. Background technique [0002] At present, the cyberspace security situational awareness system based on big data belongs to the category of emerging high-tech fields. In the field of backbone network and national-level cyberspace security, establish an all-weather and all-round security situation awareness system. At the same time, by gathering and sharing security data, it can provide a basic platform and data support for security intelligence sharing and security analysis collaboration. [0003] In the existing network security monitoring and security disposal management platform, when analyzing network threats, technicians judge the emerging network threats based on their own work experience, and classify the threats. This analysis method requires a lot of manpower and takes a lot of...

AI Technical Summary

Problems solved by technology

This analysis method requires a lot of manpower and consumes a lot of time

Moreover, due to the confrontation and uncertainty in the field of network security, existing automated analysis techniques (such as machine learning, data mining, statistical analysis, etc.) cannot achieve comprehensive analysis of network threats

Images