The invention discloses a broadcast television
network security operation method and
system based on a
large model, and the method comprises the steps: collecting log, network flow and terminal behavior data in real time, storing the data in a Kafka
message queue, receiving the data through an AI intelligent
noise reduction module, extracting alarm text semantic features through an XLM-ROBERTa model, and carrying out the
noise filtering through combining with a multi-classification model, thereby obtaining high-value data; inputting the high-value data and security document knowledge corresponding to the network
threat intelligence into an RAG
knowledge base module, generating enhanced context
information data through
knowledge extraction, vectorization storage and similarity retrieval, inputting the enhanced context
information data into a cue word of a reply model, and outputting a first
threat analysis reply; inputting the high-value data and the first
threat analysis reply into a multi-model MOE architecture, distributing tasks through a gating network, integrating expert
network output results, and generating a second threat analysis reply and a corresponding
attack thermodynamic diagram; and executing feedback optimization operation of the corresponding module based on the second threat analysis reply, thereby improving the safety operation efficiency of the broadcast television network.