Threat intelligence application method and device

Abstract

The invention provides a threat intelligence application method and device. The method comprises the steps of: acquiring threat intelligence information; operating a first smart contract, and automatically screening a second node, wherein the second node is operated equipment needing to issue the threat intelligence information; based on a consensus mechanism, writing automatic screening state information output by the first smart contract and information of the second node into a blockchain; operating a second smart contract, automatically issuing the threat intelligence information to the second node, and writing issuing state information output by the second smart contract into a blockchain based on the consensus mechanism; and operating a third smart contract, and writing the threat intelligence application state information of the second node into the blockchain based on the consensus mechanism. According to the threat intelligence application method and device, automatic issuing and linkage application of threat intelligence can be realized, and the efficiency of network security protection is improved.

Description

technical field [0001] The invention relates to the technical field of block chains, in particular to an application method and equipment for threat intelligence. Background technique [0002] With the rapid development of computer and network technology, various network security incidents occur frequently, and new vulnerabilities emerge in an endless stream, giving rise to a large number of new security risks, which pose a serious threat to network security and business security. In the traditional network security model, security protection works independently, and various information is relatively isolated. Network security protection has lagged behind the development of attack technologies. The security subsystems are independent of each other, which is easy to cause island effect. The lack of coordination among various systems makes it difficult to work collaboratively and efficiently. This is especially true when cross-industry, cross-organization, and cross-region a...

AI Technical Summary

Problems solved by technology

[0003] In the distribution and application of threat intelligence, each system is independent of each other. On the one hand, it requires a lot of manual intervention to apply threat intelligence. On the other hand, it is currently impossible to realize automatic distribution and linkage application.

Images