The invention discloses a
security alarm method, device and equipment based on chain analysis and a medium, is applied to a
security alarm system and relates to the technical field of
network security, and the method comprises the following steps: constructing a target
context object based on target data of a preset
data source, and transmitting the target
context object to a filtering node in an analysis link for
data filtering, filtering to obtain a filtered object; determining data features of the filtered object, and sending the filtered object to a
target analysis node corresponding to the data features in an analysis link for
attack analysis to obtain an
attack analysis result; and carrying out secondary
attack analysis on the
attack analysis result based on a preset analysis model, and pushing an obtained target
processing result to a corresponding
processing platform through an output node in an analysis link, so that the
processing platform carries out corresponding
security alarm or information pushing based on the target processing result. Therefore, it can be ensured that data of different types of processing nodes can be processed in time, and then alarm accuracy is ensured.