主机入侵风险预测方法、装置、电子设备及可读存储介质

By analyzing the event information of the target host through big data, querying the number of second historical events from historical events, and calculating the probability of intrusion risk, this solves the problem that existing technologies cannot deal with unknown attack methods, and achieves efficient and low-cost host intrusion risk prediction.

CN116827571BActive Publication Date: 2026-07-17SF TECH CO LTD

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
SF TECH CO LTD
Filing Date
2022-03-22
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

Existing host intrusion risk prediction methods are unable to effectively cope with the ever-evolving attack methods and techniques, especially unknown attack methods, resulting in high false alarm rates and excessively high operating costs.

Method used

By acquiring event information from the target host, big data analysis is used to query the number of second historical events from historical events, calculate the probability of intrusion risk, and combine the event type and quantity to determine whether the host is at risk of intrusion, thus avoiding the need to set specific detection rules for each intrusion method and technique.

Benefits of technology

It enables accurate identification of unknown attack methods and techniques, reduces operating and detection costs, and improves the accuracy and efficiency of intrusion risk prediction.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116827571B_ABST
    Figure CN116827571B_ABST
Patent Text Reader

Abstract

本申请公开了一种主机入侵风险预测方法、装置、电子设备及可读存储介质,本申请提供的主机入侵风险预测方法从历史事件中查询第二历史事件,根据第二历史事件的历史事件数量得到目标事件对应的操作的历史产生次数,通过大数据的信息优势评估目标事件对应的操作为入侵操作的可能性,进而确定目标主机的入侵风险预测结果,相比传统的方法无需参考入侵的方式和手法,因此即使检测时入侵方式和手法是未出现过的方式和手法,仍然能够对入侵进行准确的识别。另一方面,本申请提供的主机入侵风险预测方法相比传统的方法,无需针对每一种入侵方式和手法都专门设置特定的检测规则,因此可以大大降低运营成本和检测成本。
Need to check novelty before this filing date? Find Prior Art