Network attack analysis method and device, readable storage medium and computer equipment

Abstract

The invention discloses a network attack analysis method and device, a readable storage medium and computer equipment, and the method comprises the steps: reading a first object entity selected by a user when a network attack alarm occurs; analyzing the first object entity through a preset analysis query interface to generate first query result data, the analysis query interface having query logicinformation; extracting the query result data to generate a second object entity; analyzing the second object entity through the analysis query interface to generate second query result data; and obtaining a relationship between the first query result data and the second query result data, connecting the first object entity and the second object entity through a relationship graph, and displayingthe relationship graph. According to the method, the problems of high learning cost and incapability of visually seeing the association relationship behind the data in the prior art can be solved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network attack analysis method, device, readable storage medium and computer equipment. Background technique [0002] In today's network, there are all kinds of hackers with different purposes to carry out network attacks on other individuals or enterprises on the Internet, in order to achieve their purposes of gaining benefits, improving reputation, political intentions and so on. However, in previous security incidents, enterprises had problems with the perception of compromised hosts in the network, and were often unable to detect attacks in the network in the first place. Hackers lurk within the organization for a long time, collecting information, stealing sensitive data or even destroying it. [0003] In order to enhance the security awareness of enterprises, more and more enterprises have established log analysis platforms. However, the current log analysis pl...

AI Technical Summary

Problems solved by technology

[0004] Therefore, an object of the present invention is to propose a network attack analysis method to solve the problems of high learning cost and inability to intuitively see the relationship behind the data in the prior art

Images