Method and platform for realizing DNS domain name request analysis by power grid threat intelligence

Abstract

The invention relates to a method for realizing DNS domain name request analysis by power grid threat intelligence based on big data and a platform thereof. The method comprises the following steps: analyzing and processing domain names, URLs and IP data in collected threat information by using big data; automatically and regularly collecting threat intelligence by utilizing crawler scripts; screening and extracting the IoC information from the security consultation articles through data mining and data matching, and updating the source of the IoC; recording, parsing and analyzing the DNS domain name request log; and performing matching analysis on different threat information sources stored in the database and the DNS request log by using a request.py script, and outputting a result. Automatic collection and extraction of threat intelligence and standardization of threat intelligence information are achieved, it is proved through practice that the effectiveness is good, and domain name request logs for accessing malicious websites can be recorded and used for effective analysis.

Description

technical field [0001] The invention relates to the field of computer application technology, and more specifically, to a method and platform for realizing DNS domain name request analysis based on big data-based power grid threat intelligence. Background technique [0002] Threat intelligence is the cornerstone of advanced threat countermeasures. Its importance has been fully valued by enterprises and the industry. A large number of conferences, forums, reports, and related threat intelligence products and service subscriptions have emerged rapidly. Related research and development activities are very active. People inspire. However, how to gradually establish and consolidate the foundation of the threat intelligence ecosystem, including collection, analysis, accumulation, sharing, application, etc., and how to apply threat intelligence in the enterprise is still a challenge. As an important strategic resource, big data has reached a global consensus. According to the rese...

AI Technical Summary

Problems solved by technology

[0008] In order to solve the problems existing in the prior art, the present invention provides a charging and parking management device and method for an electric vehicle three-dimensional mechanical garage, which solves the problem that the prior art cannot effectively use threat information to analyze domain name requests to ensure network security

Images