Network space data fusion analysis method and system, electronic equipment and storage medium

Abstract

The embodiment of the invention discloses a network space data fusion analysis method and system, electronic equipment and a storage medium, and relates to the technical field of network security. The method comprises the following steps: acquiring information data in a network space; extracting a graph feature set which is carried by the intelligence data and is related to a first business scene according to the first business scene; based on the graph feature set and a knowledge graph library, performing fusion analysis on the intelligence data in the network space; the knowledge graph library is a database which is constructed based on a knowledge graph model corresponding to the first business scene and comprises elements and association relationship characteristics between the corresponding elements. According to the graph feature set and the knowledge graph library constructed based on the knowledge graph model, identification and fusion analysis can be automatically performed on the network space detection data, and the analysis efficiency and accuracy of the network space intelligence data of the target network can be improved to a certain extent; the method is suitable for a network security analysis scene.

Description

technical field [0001] The invention relates to the technical field of network security, and in particular, to a method, system, electronic device and storage medium for fusion analysis of network space data. Background technique [0002] With the development and popularization of Internet information technology, network and information security have become the focus of attention of all countries. On the one hand, network security technicians of various social institutions use various security products and tools such as intrusion detection, traffic analysis, vulnerability scanning, network scanning, port scanning, etc. to monitor, warn and discover various potential safe question. On the other hand, under the background of accelerated construction and application of new infrastructure and cloudification of IT infrastructure, new concepts and new network security concepts and architectures represented by "zero trust" and "active defense" are accelerated. In order to avoid c...

AI Technical Summary

Problems solved by technology

At present, it mainly relies on manual collection and analysis of data, which has problems such as low efficiency and low accuracy. Especially when the amount of target network intelligence information is huge and the target network environment is complex and changeable, it is even more difficult for relevant security personnel to deal with it, resulting in the inability of data Effective use or even a misjudgment of the security situation may eventually lead to the failure of the defense and the attack

Images