The invention discloses a
network security alarm optimization method and
system based on
deep learning and multi-dimensional
correlation analysis, belongs to the technical field of detection and protection in
network security, and aims to solve the technical problems of how to optimize
network security alarm, reduce the
false alarm rate of network
security alarm and prevent operation and maintenance personnel from being interfered by
false alarm. According to the technical scheme, the method comprises the steps of alarm information collection and storage, wherein comprehensive and accurate alarm information and
processing information are collected from all key nodes of a network and stored; multi-dimensional
correlation analysis: starting from four dimensions of time, alarm types, asset IPs and judgment results, mining correlation rules among the time, the alarm types, the asset IPs and the judgment results through an
Apriori algorithm, and further judging whether the new alarms are false alarms or not; constructing and training a
deep learning model: dividing the alarm data into a
training set and a
test set according to a preset proportion in a disorganized order; and
false alarm judgment and feedback are carried out.