Security threat intelligence management method and system based on big data, storage medium and terminal

Abstract

The invention discloses a security threat intelligence management method and system based on big data, a storage medium and a terminal. The method comprises the steps of obtaining a data set pre-stored in a data warehouse; inputting each piece of data in the data set into a preset data analysis layer to generate threat intelligence which comprises static threat intelligence and dynamic threat intelligence; and performing network security defense based on the threat information. Therefore, by adopting the embodiment of the invention, the security defense capability of the whole network can be improved.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a big data-based security threat intelligence management method, system, storage medium and terminal. Background technique [0002] With the development of Internet technology, network attack methods are showing a trend of diversification and AI. At the same time, the open source of attack tools makes the threshold of network attack lower, which leads to the increase of enterprise defense costs and the gradual decline of defense capabilities, especially for the current AI (artificial intelligence) attacks, due to the use of AI technology to fully simulate real user scenario operations, have led to an exponential increase in the difficulty of enterprise defense. [0003] At present, in network defense technology, virus samples are first analyzed and open-source intelligence is collected, then virus samples are analyzed through a sandbox system and security experts analyz...

AI Technical Summary

Problems solved by technology

Since the output of threat intelligence is based on attack scenarios and virus samples that have already occurred, when unkn

Images