一种网络安全信息的处理方法、装置及储存介质
By adopting a three-tier architecture of "preliminary analysis - behavioral analysis - intelligent control" and a time decay model, the problem of correlation mining and multi-stage attacks in existing network security analysis technologies has been solved. This enables accurate capture and differentiated control of complex attacks, adapting to the network environments of different enterprises.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- YANGZHOU QINGYAN SOFTWARE TECH CO LTD
- Filing Date
- 2025-07-30
- Publication Date
- 2026-07-17
AI Technical Summary
Existing network security analysis technologies are unable to effectively uncover the correlations between potential threats, distinguish between legitimate access by internal employees and abnormal behavior, traditional detection methods struggle to cope with multi-stage attacks, massive amounts of network data cause analysis delays, and rigid models are unable to adapt to new threats, all of which reduce the security of network information.
The system adopts a three-tier architecture of "preliminary analysis - behavior analysis - intelligent control". The preliminary data analysis module builds a control reference set, and the behavior analysis module generates a behavior reference set. Finally, the intelligent control module makes a comprehensive decision, introduces a time decay model and multi-indicator evaluation, and constructs a comprehensive behavior anomaly index to achieve dynamic risk assessment and differentiated control.
It achieves precise capture of complex attacks, supports differentiated management and control of internal/external IPs, forms a closed-loop protection system, adapts to different attack scenarios, ensures the rigor and flexibility of the analysis logic, and is adaptable to the network environments of different industries/enterprises.
Smart Images
Figure CN120710786B_ABST