The invention belongs to the technical field of
computer network security, and discloses a power
network security knowledge ontology modeling method, which comprises the following steps of: firstly, collecting multi-mode heterogeneous data such as power monitoring, security equipment and
threat intelligence in parallel; then, adopting a
hybrid strategy, on one hand, constructing a top-layer seed ontology based on
a domain standard, and on the other hand, automatically extracting an entity relationship from the text by utilizing a
deep learning model; secondly, associating multi-source knowledge and solving conflicts through entity alignment and
sequential logic fusion, and generating a consistent and credible global knowledge view; and finally, establishing an ontology self-evolution
mechanism based on
reinforcement learning, dynamically adjusting knowledge weight and automatically expanding a mode, realizing deep understanding, accurate prediction and self-
adaptive evolution of network threats, and improving the
active defense level of a power
system. According to the method, the core problems of one-sided
knowledge acquisition, poor fusion capability,
static model evolution incapability and the like in the prior art are solved.