Virtual identity knowledge graph establishing method for aiming at network threat discovery

Abstract

The invention discloses a virtual identity knowledge graph establishing method for aiming at network thread discovery, wherein the method belongs to the field of network virtual identity tracking. The method aims to settle a technical problem of reducing time in searching virtual identity information for improving network tracking and tracing efficiency. The method comprises the steps of (1), searching the virtual identity information of a user through a plurality of ways which comprise searching user registration information of different Internet websites, directionally crawling user individual information which is disclosed in a preset website, and crawling the virtual identity information of the user based on a searching engine; (2), combining a plurality of sets of user registration information in a user registration information table for generating a data sheet I, (3), combining the data sheet I with a user individual information sheet for generating a data sheet II; and (4), combining a virtual identity information sheet with the data sheet II for generating the virtual identity knowledge graph. The identity information is searched through the virtual identity knowledge graph, thereby reducing time in searching the virtual identity information and improving efficiency in network tracking and tracing.

Description

technical field [0001] The invention relates to the field of network virtual identity tracking, in particular to a method for constructing a virtual identity knowledge map oriented to network threat discovery. Background technique [0002] Faced with the increasing number of network security incidents, it is difficult to deter and attack attackers only by relying on passive technical means to protect and detect deliberate network intrusions and attacks. To locate the attackers and implement corresponding punishments or sanctions, only then can network attackers be effectively contained. At present, the method of network traceability is mainly to collect the virtual identity information related to the fingerprint from the Internet after finding the fingerprint of the attacker in the network attack event, which usually takes a lot of time. How to reduce the time of collecting virtual identity information to improve the efficiency of network traceability has become an urgent p...

AI Technical Summary

Problems solved by technology

At present, the method of network traceability is mainly to collect the virtual identity information related to the fingerprint from the Internet after finding the fingerprint of the attacker in a network attack event, which usually takes a lot of time

Images