Method and device for constructing network security knowledge graph

Abstract

The embodiment of the invention provides a method and device for constructing a network security knowledge graph, and relates to the technical field of network security. The construction method of thenetwork security knowledge graph comprises the steps: firstly obtaining original relation data for constructing the network security knowledge graph, and constructing an original relation graph according to the original relation data; then performing relationship reasoning processing on an original relationship graph through a pre-constructed relationship reasoning model to obtain a missing relationship set; and finally, performing optimization processing on the original relationship graph according to the missing relationship set to obtain a network security knowledge graph. Visibly, in themethod, the missing relation can be automatically reasoned, the network security knowledge graph can be generated, manual participation is not needed, the accuracy is high, the speed is high, and theconstruction efficiency of the network security knowledge graph can be improved.

Description

technical field [0001] The present application relates to the technical field of network security, in particular, to a method and device for constructing a network security knowledge graph. Background technique [0002] At present, with the development of big data technology and the increasingly complex network environment, cyberspace contains a large amount of valuable network threat intelligence data. The network security knowledge graph can conduct fine-grained in-depth correlation analysis and mining of massive fragmented multi-source heterogeneous threat intelligence data, and then identify network attacks and intrusion behaviors through the network security knowledge graph. The existing network security knowledge graph construction method usually first extracts entities and the relationship between entities from the network threat intelligence data, and then manually infers the missing relationship between entities, and finally according to the extracted entities, the ...

AI Technical Summary

Problems solved by technology

In practice, it is found that the existing network security knowledge map construction method, the missing relationship between entities is obtained by relying on experience analysis, and the accuracy is low

It can be seen that the existing network security knowledge map construction method has low accuracy, which reduces the construction efficiency of the network security knowledge map.

Images