The invention relates to the field of
vulnerability mining, in particular to a
vulnerability mining method based on a
large model, and the method comprises the steps: constructing a
label combination
library for a working condition terminal, and subsequently constructing a correlation model for a
label combination based on a credible log fragment corresponding to each
label in the label combination; based on the
occurrence probability of each label combination and combined with the constraint discrete features of the
association model corresponding to the label combination, effective sub-labels are set for the label combination, a current label combination of a current log
record is analyzed subsequently for a new log
record, and adaptability analysis is performed on the log
record according to the effective sub-labels corresponding to the current label combination, so that the log record is obtained. According to the method, potential laws of the operation process of the industrial control terminal are considered, the
association model of the log records under the specific label combination is constructed, the log records are analyzed based on the effectiveness adaptability of the label combination, log fragments possibly representing that potential abnormal vulnerabilities exist in a
system are rapidly marked when massive log records are faced, and the
system reliability is improved. And the accuracy and efficiency of
vulnerability mining are improved.