Network threat intelligence sharing platform based on blockchain smart contract

Abstract

The invention provides a network threat intelligence sharing platform based on a blockchain smart contract, which is based on an Ethereum underlying architecture, takes network threat intelligence data as data assets, processes the network threat intelligence data through a trustworthy threat intelligence processing module, and with distributed data storage of a blockchain system, through intelligent contract development and design, intelligence sharing of network threat intelligence data on an autonomous peer-to-peer data platform by a data provider and a data purchaser is realized. Threat intelligence credibility evaluation in a unified security sharing network space of network threat intelligence data is realized, the problem of low multi-source data integration quality faced by threatintelligence sharing in the prior art is solved, the satisfaction degree of sharing platform users is increased, and the false alarm rate of threat intelligence security application is reduced.

Description

technical field [0001] The present invention relates to the field of network security, and more specifically, relates to an APT detection method based on smart contract-based threat intelligence sharing. Background technique [0002] Advanced Persistent Threat (APT, Advanced Persistent Thread) refers to a long-term persistent attack on a specific target. NIST defines APT as: Attackers with massive manpower, technology, equipment and other resources aim at specific targets and use a variety of different attack methods (including technology, physics, fraud, etc.) to seek or actively create opportunities to achieve their attack goals. Attack goals generally include establishing and maintaining backdoors in the IT infrastructure of the victim organization, digging, stealing, tampering with specific critical information, or lurking in a low-key manner to carry out attacks in the future. It is not difficult to see from the statistical data that cyber attacks are becoming more and...

AI Technical Summary

Problems solved by technology

In the well-known APT incidents that have been exposed so far, social attacks, 0day exploits, and physical ferrying emerge in an endless stream, while traditional detection often only focuses on border defense. Once the system border is bypassed, the difficulty of implementing subsequent attack steps will be greatly reduced.

Images