A data quality assessment method, device and storage medium

Abstract

The embodiment of the present invention discloses a data quality evaluation method, device and storage medium. The method includes: receiving intelligence data, analyzing each field contained in the intelligence data to determine key fields; the same historical intelligence data; in the case of historical intelligence data, add 1 to the historical occurrence times of historical intelligence data; score the intelligence data according to the preset data quality scoring rules; according to the data quality scoring and historical occurrence times Determine the quality of intelligence data. The embodiment of the present invention performs data quality scoring on the intelligence data according to the preset data quality scoring rules, and can perform dynamic scoring according to the key fields of the intelligence data, and determine the intelligence data together with the occurrence times of the intelligence data in the historical intelligence database The quality of the evaluation can not only increase the evaluation dimension, but also make the evaluation results more accurate.

Description

technical field [0001] The invention relates to the field of data processing, in particular to a data quality evaluation method, device and storage medium. Background technique [0002] Threat intelligence data is evidence-based knowledge including scenarios, mechanisms, indicators, implications, and actionable recommendations. This knowledge is about existing or imminent threats or dangers to assets, and can provide decision-making information for the subject to respond to related threats or dangers. [0003] The intelligence quality assessment method in the prior art is a history-based intelligence quality assessment method. To assess the quality of a piece of threat intelligence data mainly depends on the situation reported by multiple sources. For example, data source A identifies a certain IP as malicious, and data sources B and C Also identify an IP as malicious, and evaluate the IP as malicious data or high-risk data. Existing schemes use data history as the main re...

AI Technical Summary

Problems solved by technology

[0005] In view of this, the embodiment of the present invention proposes a data quality assessment method, device, and storage medium to solve the following problems in the prior art: the existing threat intelligence data assessment techniques have fewer assessment dimensions, and mostly use static Indicators, the evaluation model cannot be dynamically adjusted according to the actual situation, resulting in certain deviations in the evaluation results

Images