Information security baseline learning method based on artificial intelligence

Abstract

The invention discloses an information security baseline learning method based on artificial intelligence. According to the method, a safety baseline training model is constructed based on the deep learning algorithm, and the finally obtained safety baseline classification model can show very strong self-learning ability and adaptive ability through training and learning, so the safety baseline classification model can be applied to different scenes in subsequent application, and the safety baseline classification model can be applied to different scenes; the information security baseline capable of evaluating the information security of the industrial Internet platform from multiple network layers and application layers is automatically generated, so dependence on manual work is eliminated, manual setting of workers is not needed, and working efficiency is improved. Moreover, as the training feature data used for constructing the security baseline classification model comes from datainvolved in the interaction process of the client and the server, the information security baseline configured based on the security baseline classification model can realize security monitoring of the client and improve the security of the server; and security monitoring of the server and the interaction process between the client and the server can be realized.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of information security, and in particular to an artificial intelligence-based information security baseline learning method. Background technique [0002] The Industrial Internet is the result of the convergence of global industrial systems with advanced computing, analytics, sensing technologies, and Internet connectivity. Its essence is to closely connect and integrate equipment, production lines, factories, suppliers, products and customers through an open and globalized industrial-grade network platform, and efficiently share various element resources in the industrial economy. Intelligent production methods reduce costs, increase efficiency, help the manufacturing industry to extend the industrial chain, and promote the transformation and development of the manufacturing industry. That is, through the connection between intelligent machines and eventually man-machine connecti...

AI Technical Summary

Problems solved by technology

[0004] However, the current configuration of the information security baseline of the industrial Internet platform is mostly aimed at the security monitoring of the client itself, without fully considering the security of the network data packets sent by the user, so if a distributed denial of service attack (DDoS) occurs of service attack, DDOS), the existing information security baseline cannot detect

At the same time, based on the information security baseline that only considers the configuration requirements of the client's own security monitoring, the security of the server is not fully considered, so it is impossible to detect the abnormality of the server.

Due to the lack of security detection on the server, and this kind of information security baseline is relatively generalized and long-term, it is impossible to make a targeted security judgment for a certain interaction with the server

[0005] In addition, the current configuration of the information security baseline of the industrial Internet platform is usually set by the relevant staff artificially setting the security evaluation threshold, that is, making a rigid security evaluation based on index data, which not only lacks humanization, but also targets different Scenarios, the same configuration standard cannot be perfectly applied, which requires staff to set different security evaluation thresholds for different scenarios, which undoubtedly increases the workload

Images