The invention discloses an
industrial internet attack and defense situation and risk early warning and sensing method, and particularly relates to the field of internet risk early warning and sensing, which comprises the following steps of: acquiring multi-source heterogeneous data, constructing a basic
data set covering an
attack, service and equipment ternary space, including
attack characteristics, service influence and equipment control vectors, and solving the problems of
data heterogeneity and dispersion; constructing a triple function based on the
data set, respectively quantifying the attack comprehensive
threat degree, the influence degree of the attack on the service and the malicious control risk of the equipment, and retaining the characteristics of each dimension; a
dynamic network topology model is constructed, nodes, edges and edge weights are defined, an attack propagation path and influence intensity are described, and node state dynamic updating is achieved; and finally, a risk prediction model is constructed by fusing quantitative indexes and
topological information, a global risk value is calculated, graded early warning is realized through triple dimensions, a corresponding response mechanism is matched, and the timeliness and effectiveness of
industrial internet security protection are improved.