Network attack identification method and device, computer equipment and storage medium

Abstract

The invention relates to a network attack identification method and device, computer equipment and a storage medium. The method comprises the following steps: acquiring network communication related data to be processed; screening network attack data related to a network attack event from the network communication related data, wherein the network attack data comprises attack behavior data corresponding to at least one network attack behavior occurring in the network attack event; determining network attack features corresponding to the corresponding network attack events according to the network attack data; performing classification processing on the network attack features, and outputting organization information corresponding to the network attack event, wherein the organization information is used for tracking and tracing the network attack event. By adopting the method, the identification accuracy of the organization to which the network attack belongs can be improved, and network security is guaranteed.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a network attack identification method, device, computer equipment and storage medium. Background technique [0002] With the development of network technology, network security technology has emerged. Network security technology is mainly to maintain the security of computer communication networks, including the normal operation of network hardware and software, and the security of data and information exchange. In practical applications, the frequent occurrence of network attacks often poses hidden dangers to the network security of the system. In order to ensure system security, it is particularly important to identify network attacks and determine the family to which the initiator of the network attack belongs. [0003] In traditional schemes, the determination method for identifying the family of network attack behaviors usually compares the code characte...

AI Technical Summary

Problems solved by technology

However, the traditional method of determining the family of network attacks cannot accurately trace the source of network attack events due to the relatively single and inherent characteristics and dimensions of the determination

Images