Computer network security monitoring system and method

Abstract

The present invention discloses a computer network security monitoring system and method, and relates to the field of computer network security technology. The specific implementation process includes: first, the present invention proposes a multi-source fusion security monitoring model for monitoring the network security of the target computer. The model focuses on the interactive information and temporal contextual information between multi-source data features, and captures the implicit association between features through a graph structure to further determine whether there are security risks; secondly, through an online update strategy, the model weights are updated while the network security is being monitored, thereby improving the generalization and robustness of the model; finally, a security risk matching method is designed, and the security risk database is linked to provide corresponding measures and suggestions in real time. The present invention can mine the hidden relationships between multi-source network security data, reduce missed detections and false detections, further improve the accuracy of network security monitoring, and is conducive to real-time monitoring of computer network security risks.

Images