Big data-based security interception rule updating method and artificial intelligence security system

Abstract

The embodiment of the invention provides a big data-based security interception rule updating method and an artificial intelligence security system, and the method comprises the steps: carrying out the matching of a security interception rule cluster of an information security operation framework for intercepting an application service according to a service risk vulnerability; and screening a plurality of target screening security interception rule clusters for the service risk vulnerability according to the security interception service interval of each security interception rule in the security interception rule clusters, and performing vulnerability pre-repair according to the target screening security interception rule clusters. According to the technical scheme, the security interception rule characteristics of the information security operation framework for intercepting the application service are considered, and the security interception service interval of the security interception rule is also considered, so that the matching degree with the intercepted application service can be improved during vulnerability pre-repair, and the vulnerability repair effect can be improved.

Description

technical field [0001] The present disclosure relates to the technical field of big data, and for example, relates to a method for updating security interception rules based on big data and an artificial intelligence security system. Background technique [0002] Internet risk control is usually based on big data and belongs to the data application layer. For Internet service providers, the core value of risk control lies in the identification of information security risks. For example, the number and variety of security risks on the Internet is increasing, and today a large number of malware samples can be continuously detected, most of which are well-targeted, use stealth methods to steal confidential data, and are themselves constantly evolving . [0003] Information security risk is the process of discovering, understanding, assessing, and mitigating risks and their underlying vulnerabilities, as well as understanding the impact on information, information systems, and...

AI Technical Summary

Problems solved by technology

However, in related technologies, the pre-fixing of vulnerabilities does not consider matching with interception application services (such as application services provided by third-party interception service providers, application services introduced iteratively by Internet service providers, etc.), making it difficult to ensure the best vulnerability repair Effect

Images