The invention discloses a
network security equipment knowledge reasoning method, device and
system and a storage medium, and the method comprises the steps: obtaining data collected by distributed deployment
network security equipment in real time, and carrying out the multiple fusion to obtain a
knowledge state directed graph containing the directed relationship between the
network security equipment; making the directed relationship of the
knowledge state directed graph into a multivariate matrix, and sending the multivariate matrix into a risk reasoning state
machine constructed by a pre-trained multi-layer deep neural network to obtain a
state prediction result containing the directed relationship between the network security devices; and comparing the obtained
state prediction result with a
knowledge state directed graph obtained based on data collected by the network security equipment at the next moment, and if the
state prediction result is inconsistent with the knowledge state directed graph, judging that a security risk situation occurs. According to the method, device and
system, safety risks are found in time,
active defense is achieved, the whole process of the
system and the mutual relation are considered in the whole reasoning process, the whole process is highly integrated, and the reasoning result is more accurate.