The invention relates to a network
threat report
attack knowledge graph automatic construction method and
system based on a large
language model, a storage medium and a program product, and the method comprises the steps: carrying out the iterative
processing of extracted entities and relationships through a clustering method based on the large
language model, and generating an initial
attack knowledge graph; according to the invention, aggregation
processing is carried out on a plurality of technology example
threat reports belonging to the same
attack technology through an attack technology graph template generation mechanism, a standardized attack technology standardized
template library is established, and automatic attack technology tagging of new
threat reports is realized by adopting an attack technology alignment method based on Word2Vec and
WordNet, so that the automatic attack technology tagging of the new threat reports is realized. And a complete attack technology
knowledge graph is constructed, so that a
security analyst can quickly understand an attack path and a key threat point, and the
automation degree and the accuracy of
threat intelligence analysis are remarkably improved.