A method for traceability of IP address organization based on knowledge graph

Abstract

The present invention relates to the field of information technology, and relates to a method for tracing the source of an IP address organization based on a knowledge map, which uses cyberspace to detect an IP address, further infers its organization based on the combination of search, clustering and knowledge maps, and mines the hidden information in the IP address. Deep value information. Aiming at the isolation and dispersion of security information in cyberspace, the present invention solves the dilemma of IP and domain name mapping without organizational information in cyberspace security, and eliminates the barriers between network security information such as IP, domain name and organization, based on practical applications. , to collect more and more comprehensive security information for network attack and defense, monitoring, etc. in cyberspace security; to effectively filter out the names of candidate organizations with high probability and high possibility from the messy and disordered search results, and efficiently Realize the optimal inference result of obtaining the organization to which it belongs through the IP address; ensure the accuracy of the result of inferring the organization to which it belongs from the IP address in the field of cyberspace security.

Description

technical field [0001] The invention relates to the field of network information technology, in particular to a method for traceability of an IP address organization based on a knowledge map. Background technique [0002] In today's era, the development of information technology is getting faster and faster, and the threat sources and attack methods of network security are constantly changing. It is urgent for network security personnel to improve the perception ability of network security information, perceive security information in an all-round way, and discover and master more security information in time. Seize the first opportunity in cyberspace security offensive and defensive battles, and achieve "know yourself and the enemy". [0003] At present, in the field of network security, most network security information is isolated and scattered, which makes it difficult for security personnel to effectively use security information to solve practical problems. [0004] T...

AI Technical Summary

Problems solved by technology

[0006] (1) IP address information in cyberspace cannot be directly mapped to the organization to which it belongs;

[0007] (2) The search results are complicated and disorderly, and it is difficult to obtain optimal inference results;

[0008] (3) The clustering result is inaccurate, and there is a huge clustering error

[0009] Therefore, there is no particularly practical and effective method in the existing field of network information security, which can analyze and obtain effective security information from the network, and then use and solve practical problems; making the solutions to many problems in reality less efficient and reliable Sex can not be effectively improved

Images