Threat intelligence analysis method and device thereof, electronic device and storage medium

By determining the initial reputation value and calculating multi-dimensional reputation values ​​in threat intelligence analysis, and using clustering algorithms for correction, the problem of low accuracy in threat intelligence analysis is solved, enabling the credibility assessment of third-party open-source intelligence and improving the quantity and quality of threat intelligence.

CN116186691BActive Publication Date: 2026-06-09HILLSTONE NETWORKS CO LTD

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
HILLSTONE NETWORKS CO LTD
Filing Date
2022-12-29
Publication Date
2026-06-09

AI Technical Summary

Technical Problem

In existing technologies, the accuracy of threat intelligence analysis is low, especially the lack of effective methods for assessing the credibility of third-party open-source intelligence, resulting in a high false positive rate and an inability to effectively utilize third-party open-source data.

Method used

By determining the initial reputation value of the intelligence to be analyzed, calculating its reputation value in preset dimensions such as time, tag, and aggregation, and correcting it using a preset clustering algorithm, the target reputation value is calculated to determine credible intelligence, thereby improving the accuracy of the analysis.

Benefits of technology

It improves the accuracy and quality of threat intelligence analysis, effectively utilizes third-party open-source intelligence, and enhances the quantity and quality of threat intelligence for security vendors.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116186691B_ABST
    Figure CN116186691B_ABST
Patent Text Reader

Abstract

The application discloses a threat intelligence analysis method and device, an electronic device and a storage medium, and the analysis method comprises the following steps: determining an initial credibility value of to-be-analyzed intelligence, calculating a dimension credibility value of the to-be-analyzed intelligence in each preset dimension, inputting all the dimension credibility values into a preset clustering algorithm to obtain a correction value, calculating a target credibility value of the to-be-analyzed intelligence based on the initial credibility value, all the dimension credibility values and the correction value, and determining that the to-be-analyzed intelligence is credible intelligence in a case where the target credibility value is greater than a preset credibility threshold. The application solves the technical problem of low accuracy in analyzing threat intelligence in the related art.
Need to check novelty before this filing date? Find Prior Art