Method and system for updating network threat information

Abstract

The invention discloses a method and a system for updating network threat information. In the method, a log generated by hitting the high-frequency information in the equipment end is processed to form the summary data, the summary data is fed back to the information server through the cloud platform, and the information server places the summary data in the information acquisition queue accordingto the fed back summary data, so that when the basic information is acquired from the open source information, the updating information corresponding to the high-frequency information can be preferentially acquired according to the summary data. Updating information corresponding to the acquired high-frequency information is compared with the original high-frequency information; according to themethod, whether the high-frequency information is updated or not can be judged, and if yes, the updating information corresponding to the high-frequency information is sent to the equipment end through the cloud platform, so that the equipment end can update the high-frequency information in time in a targeted manner.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a method and system for updating network threat intelligence information. Background technique [0002] With the development of network technology, there will inevitably be some security holes in network devices connected to the Internet, which pose a threat to the security of network information. In order to improve the security of network information, various security vendors and enterprises actively promote the sharing of network threat intelligence information. Cyber ​​threat intelligence information refers to the information set that can help discover threats and deal with them. Cyber ​​threat intelligence information is also called intelligence information. In the process of sharing network threat intelligence information, various security vendors obtain a large amount of basic information from open source intelligence through the intelligence server, an...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem that high-frequency intelligence information cannot be updated in a targeted and timely manner when there are a large number of servers, this application discloses a method and system for updating network threat intelligence information through the following embodiments

Images