Credible threat intelligence identification method and device based on blockchain consensus mechanism

Abstract

The invention discloses a credible threat intelligence identification method and device based on a blockchain consensus mechanism. The method comprises the following steps: bringing each node of an intelligence data source into a blockchain to form an intelligence data blockchain, and monitoring each node of the blockchain to obtain intelligence data; matching a corresponding analysis strategy according to a data analysis mode of the information data to obtain a corresponding analysis result; using an intelligent contract to execute processing of an analysis result of the information data andbroadcasting the analysis result to nodes of the whole network through a blockchain network, and generating a piece of unique queried data of the whole network after the whole network reaches a consensus; and endowing a reputation value by adopting the consensus mechanism, and judging whether the information is credible or threatening information according to the reputation value. In the invention, an intelligent contract and strategy directional analysis are combined, the collected block chain data are integrated and analyzed, an threat intelligence event on the block chain is ensured to be discovered at the first time, and meanwhile an advantage of accuracy of a data analysis result is possessed.

Description

technical field [0001] The invention belongs to the technical field of computer network security, and in particular relates to a trusted threat intelligence identification method and device based on a block chain consensus mechanism. Background technique [0002] In recent years, APT (Advanced Persistent Threat Attack) incidents have emerged continuously, and its notable feature is persistence, which usually lasts for several years. Elevate privileges in the network and collect various information until important intelligence is obtained. [0003] As an evidence-based identification and analysis method, network threat intelligence analysis can describe existing or upcoming threats or dangers to assets, notify subjects to take certain responses to related threats or dangers, and actively obtain information about future security threats. information, predict security incidents, and prevent the occurrence of APT attacks from the source. Threat intelligence generally includes ...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to overcome the deficiencies in the prior art, provide a trusted threat intelligence identification method and device based on the blockchain consensus mechanism, and solve the technical problem of insufficient identification accuracy in the existing intelligence identification technology

Images