Security event prediction method, apparatus and device, and computer readable storage medium

Abstract

The invention discloses a security event prediction method, apparatus and device, and a computer readable storage medium. The security event prediction method comprises the following steps of obtaining a predicted security event in a to-be-predicted host; sorting the predicted security events according to a time sequence relationship and / or an attack stage and / or a risk level occurring in the predicted security events to obtain input variables; and inputting the input variable into a pre-trained security event prediction model, and determining a prediction result corresponding to the to-be-predicted host, the prediction result at least comprising a security event appearing in the next step. According to the invention, the safety time prediction model is constructed; predicting a security event which is about to happen to the network equipment which is currently subjected to the network attack; according to the method and the system, multi-step attack behaviors possibly suffered by a network system in the future, final targets of hacker invasion and facilities and equipment possibly threatened are predicted, so that effective targeted measures can be taken in advance for defense andprevention, and the security of the network is improved.

Description

technical field [0001] The present invention relates to the field of network security, in particular to a security event prediction method, device, equipment and computer-readable storage medium. Background technique [0002] At this stage, network attack early warning is a key link to realize active defense of network security. Use massive network security data to discover the behavior and rules of hacking, predict the multi-step attack behavior that the network system may suffer in the future, the ultimate goal of hacking, and the facilities and equipment that may be threatened, so that effective targeted measures can be taken. To carry out effective defense and prevention to invading hackers. [0003] Nowadays, there are more and more network intrusion attacks. Therefore, in the existing technology, in order to ensure the security of the network to the greatest extent, security protection equipment such as antivirus systems, firewalls, and intrusion detection systems are...

AI Technical Summary

Problems solved by technology

[0005] The main purpose of the present invention is to provide a security event prediction method, device, equipment and computer-readable storage medium, aiming to solve the technical problem that the existing network security system cannot predict network attack behavior in real time

Images