Intelligent perception and prediction method and device for network space situation and computer equipment

Abstract

The invention discloses an intelligent perception and prediction method and device for a network space situation and computer equipment, and relates to the technical field of network security. The method comprises the following steps: extracting and expressing network space entity concepts and relationships and attributes between the entity concepts, constructing a cyberspace entity concept set, associating and fusing multi-source heterogeneous original data with the cyberspace entity concept set, constructing a cyberspace situation knowledge graph, and finally performing multi-target behaviordynamic evolution analysis and prediction according to the cyberspace situation knowledge graph. Deep information mining of network space multi-source heterogeneous data is achieved, and then comprehensive and deep analysis and prediction of the overall operation situation of the network are achieved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method, device and computer equipment for intelligent perception and prediction of cyberspace situation. Background technique [0002] With the rapid development of the network and the gradual improvement of the degree of social informatization, network security issues are showing a trend of diversification and complexity, and attack activities are developing in a large-scale, coordinated and multi-level direction. People continue to use various security devices such as firewalls, intrusion detection systems, and vulnerability scanning tools to monitor networks to resist intrusions. Of course, these products protect the network system on different sides. However, the relatively independent deployment of various security devices generates a large number of event alarms, which are filled with a large amount of repetitive and unreliable information, and even form an "ala...

AI Technical Summary

Problems solved by technology

[0007] The above three types of existing technologies and methods still have some defects that cannot be ignored. One of the most important points is that the representation of knowledge is not comprehensive enough, and the in-depth information of multi-source heterogeneous data in cyberspace cannot be excavated, so it is impossible to analyze the overall information of the network. Carry out comprehensive and in-depth analysis and prediction of the operation situation

Images