Cross-terminal traceability analysis method, device and system and storage medium

Abstract

The embodiment of the invention discloses a cross-terminal traceability analysis method, device and system and a storage medium. The method comprises the steps: carrying out the matching of obtained traceability information with the safety data of each terminal, so as to obtain a matched terminal and matched data information; and recognizing the data information corresponding to each matched terminal by using a set role analysis rule so as to determine the role of each matched terminal. In the embodiment of the invention, association behaviors exist among different roles, the association behaviors among the roles can be set in the form of role association rules, and a traceability analysis result is determined according to the roles of the matched terminals and the set role association rules.2 By recognizing the roles of the terminals According to the role association rules, cross-terminal automatic traceability can be realized, the automation degree and efficiency of traceability analysis are greatly improved, and the time for responding to and disposing safety events is shortened.

Description

technical field [0001] The present application relates to the technical field of information security, in particular to a method, device, system and computer-readable storage medium for cross-terminal traceability analysis. Background technique [0002] Information security incidents refer to network security incidents that cause harm to information systems due to human factors, software and hardware defects or failures, natural disasters and other factors, and have negative impacts on society. When an information security incident occurs, people often need to conduct a traceability analysis on it. On the basis of the traceability analysis, it is possible to carry out targeted security rectification and reinforcement of the information system to avoid the same or similar information security incidents from happening again. [0003] Modern information security incidents often occur on multiple terminals. The most typical intrusion scenario is that after an attacker captures a...

AI Technical Summary

Problems solved by technology

This method of cross-terminal traceability requires manual intervention, which is costly to implement, and relies on manual analysis to make the processing efficiency of the entire traceability work low.

Images