Threat information generation and sharing system and method based on Internet of Things

Abstract

The invention discloses a threat information generation and sharing method based on the Internet of Things. The method comprises the steps of obtaining a security event and asset information detectedby a flow analysis system; acquiring a security event and asset information detected by a terminal exception analysis system; obtaining a security event, asset information and account information detected by the business analysis system; acquiring a safety event detected by a honeypot analysis system; automatically generating threat information according to the data information acquired by all thesystems; and providing a multi-dimensional query API to carry out threat information sharing. The method provided by the invention can solve the problem of generation and sharing of threat information in the security aspect of the Internet of Things at present; threat information association generation is carried out based on a security event in combination with information such as the security event, equipment and an account; related threat information can be automatically generated for security events of the Internet of Things, and the related threat information is shared externally.

Description

technical field [0001] The invention relates to the technical field of Internet of Things security, in particular to a system and method for generating and sharing threat information based on the Internet of Things. Background technique [0002] With the rapid development of the Internet of Things, the development of the country has entered the era of intelligent Internet of Things. In various physical environments such as homes, corporate offices, factory production, traffic management, aviation halls, hospital halls, etc., the Internet of Things is almost everywhere, and the Internet of Things is safe. Threats are also growing. [0003] Due to the rapid development of the Internet of Things, IoT smart devices are also growing exponentially every year, so there are more and more IoT security incidents. However, there is currently no unified threat intelligence generation method for complex IoT systems, and each system The threat intelligence is relatively independent, and ...

AI Technical Summary

Problems solved by technology

[0003] Due to the rapid development of the Internet of Things, IoT smart devices are also growing exponentially every year, so there are more and more IoT security incidents. However, there is currently no unified threat intelligence generation method for complex IoT systems, and each system The threat intelligence is relatively independent, and there is also the problem that it is difficult to share IoT threat intelligence. However, the original threat intelligence on the Internet of Things only has threat intelligence information on the IoT cloud, and the threat intelligence information on the IoT cloud is not related to terminal devices and accounts. and other information, and the threat intelligence on IoT terminals has not been collected and globally unified associated processing, that is, there is currently no way to realize the generation and management of IoT unified threat intelligence for various IoT environments

Images