Information security defense method and system, electronic equipment and storage medium

Abstract

The invention discloses an information security defense method and system, electronic equipment and a storage medium. The method mainly comprises the following steps: monitoring and capturing a data packet of a to-be-tested service system entering a host; comparing data in the data packet with pre-stored historical data, and determining whether the data packet has unknown threats; if it is determined that the unknown threat exists in the data packet, feature extraction is carried out on data in the data packet to obtain multiple pieces of feature information; respectively matching each piece of feature information with dangerous feature information in a feature library to obtain a matching result; if the matching result indicates that the data packet is abnormal request data, inputting the data packet into a machine learning module, performing calculation through a machine learning model to obtain dangerous feature information corresponding to the data packet, and updating the dangerous feature information into a feature library; if the matching result indicates that the data packet is normal request data, sending the data packet to the host. Therefore, a timely and effective defense method for information network security is realized based on machine learning.

Description

technical field [0001] The present application relates to the technical field of information network security, in particular to an information security defense method and system, electronic equipment, and storage media. Background technique [0002] As the network and computer software and hardware technologies are gradually maturing, our life and production are becoming more and more networked and intelligent. This is the convenience that technology brings to us, but it also causes a series of security issues at the same time. , under the impact of tragic security incidents, more and more attention has been paid to security issues, and a series of security software has been born and matured continuously. [0003] However, these security software will all rely on powerful vulnerability databases or defense rules, and both vulnerability databases and defense rules need to be manually added and customized. The consumption of manpower and time in the first stage is undoubtedly ...

AI Technical Summary

Problems solved by technology

[0004] Based on the deficiencies of the above-mentioned existing technologies, this application provides an information security defense method and system, electronic equipment, and storage media to solve the problem that the existing technologies cannot effectively guarantee the security of information networks

Images