Small sample threat risk early warning method and device based on deep learning

Abstract

The embodiment of the invention provides a small sample threat risk early warning method and device based on deep learning, and the method comprises the steps: collecting Internet threat risk information; obtaining corresponding word sequence data according to the Internet threat risk information; respectively inputting the word sequence data into a fragment semantic extraction model and a semantic matching model to respectively obtain a first feature vector and a second feature vector, and fusing the first feature vector and the second feature vector to obtain a deep feature; inputting the deep features into a trained deep neural network model to obtain an early warning result of the Internet threat risk information; and obtaining the trained deep neural network model by training according to the deep feature samples and the corresponding classification labels. According to the method, Internet threat risk information early warning is carried out by using the extracted deep features, so that the obtained early warning result of the Internet threat risk information is more accurate.

Description

technical field [0001] The present invention relates to the technical field of network security, in particular to a small-sample threat risk early warning method and device based on deep learning. Background technique [0002] With the rapid development of Internet technology, life has become more and more convenient. At the same time, every company or organization may become the target of network attacks, and network security is also facing higher and higher risks. These risks may be information leakage caused by internal employees' intentional or unintentional disclosure of passwords and sensitive information, or may be deliberate attacks or destruction by Advanced Persistent Threat (APT) organizations using security vulnerabilities. Facing the growing threats on the Internet, early warning of threat risks has become an important part of corporate and even national network security. [0003] At present, the method of early warning of threat risk is mainly to combine the m...

AI Technical Summary

Problems solved by technology

However, in actual usage scenarios, there are some defects in the threat risk early warning method combined with policies or rules

For example, the scoring and judgment of threat risks based on policies or rules is easy for malicious organizations to bypass the policies or rules and use them. Due to the relatively poor scalability of the method of combining policies or rules, developing or updating a set of threat risk early warning strategies or rules often requires a lot of financial or energy investment, which requires a high threshold for researchers

Images