Threat intelligence defense method and system

Abstract

The invention provides a threat intelligence defense method and system. The method comprises the steps of acquiring threat intelligence; acquiring a threat information management platform based on thethreat information; performing collision matching on the threat intelligence management platform and the security big data analysis platform to obtain alarm information; performing normal scanning task screening processing on the alarm information to obtain threat alarm information; performing association analysis on the threat alarm information and a dynamic asset library, and positioning a threat source corresponding to the threat alarm information; and blocking the threat alarm information and the threat source. According to the invention, the network security can be effectively ensured.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a threat intelligence defense method and system. Background technique [0002] With the development of science and technology, computer networks are also becoming more and more popular. Due to the openness, interconnection and various connection methods of computer networks, network users often face network attacks from network hackers. Therefore, in the face of various threats that invade the network, it is very important to ensure network security. [0003] In terms of ensuring network security, the existing technology generally deploys security products such as firewalls and intrusion detection systems to implement security defense methods such as attack behavior perception, log collection and analysis, and security notification. These security products compare the network security events to be detected with cloud data, and if threat intelligence is found, ...

AI Technical Summary

Problems solved by technology

[0005] This application provides a threat intelligence defense method and system to solv...

Images