Network information security monitoring and early warning method

Abstract

The invention provides a network information security monitoring and early warning method. The method comprises the following steps: acquiring network information of a to-be-monitored category in a target site; based on a RoFormer-Sim model, generating a text vector from the text data after integration processing, wherein the text vector comprises semantic content of the text data; according to the text vector, carrying out clustering analysis on commodity information which is the same as and / or similar to the semantic content in the dark online shopping mall to obtain a clustering center of the network information of the to-be-monitored category; performing similarity calculation based on the text data of the clustering center in the dark web forum to obtain a text similarity value; and according to the clustering center and the text similarity value, completing scoring of the security status of the network information of the to-be-monitored category. According to the method, the security condition of the related data of the dark web is evaluated, the final evaluation result is displayed in a scoring manner, the trueness and importance of the security condition of the related data of the dark web are in direct proportion to the score obtained by evaluation, the evaluation is more comprehensive, and real-time evaluation and early warning are performed.

Description

technical field [0001] The present application relates to the technical fields of information security, network monitoring and electronic data forensics, and in particular, to a network information security monitoring and early warning method. Background technique [0002] Dark web sites are a general term for a type of web sites active in the dark web space. Such web sites cannot be directly searched and accessed through conventional browsers, and access channels need to be configured with specific software and services. Due to its layer-by-layer encryption and untraceable characteristics, although the dark web has powerful performance in protecting users' privacy, the hidden service websites developed by it are very easy to breed all kinds of crimes that use the network as a link tool. Under the premise of strong anonymity of dark web sites, how to effectively analyze dark web content and obtain investigative clues has become the key to dark web research. Many scholars at...

AI Technical Summary

Problems solved by technology

[0003] In the current dark web analysis and research content, most of the sensitive events in the dark web are discovered based on classification, sensitive words, etc., or the academic research on the dark web is carried out, without considering that the dark web is anonymous and everyone can publish , deliberate camouflage and other characteristics lead to the important feature of a large number of false information in the dark network, and there are many sensitive events in the dark network, if the authenticity of the news is not evaluated and the importance is analyzed, it will lead to a large number of police resources. Wasted on detection of disinformation

Images