Threat vulnerability mining method based on information security big data and information security system

Abstract

The invention discloses a threat vulnerability decision-making method based on information security big data and an information security system, and the method comprises the steps: considering a threat intelligence chain expressed by a penetration relation between behavior track nodes in a historical threat behavior model according to chain intelligence formed through the arrangement of multiple types of historical threat behavior information; the threat penetration vulnerability decision is performed according to the threat intelligence chain, so that the situation that vulnerability decision errors exist due to the fact that threat penetration vulnerability decision is performed by only considering the triggering activity of the threat behavior in the traditional scheme can be improved, and the decision accuracy of the threat penetration vulnerability between the threat protection activity and the sensitive service request activity is improved; therefore, the effectiveness of subsequent safety protection reinforcement is improved.

Description

technical field [0001] This application relates to the field of big data technology, in particular, to a threat vulnerability mining method based on information security big data and an information security system. Background technique [0002] With the development of big data technology, data and data protection are crucial considerations for cloud platforms. The so-called information security threat refers to the source and means of a specific type of attack, and usually refers to a new or newly discovered accident that may endanger the system or the entire organization of the cloud platform. Therefore, threat vulnerability decision-making testing is particularly important to ensure continuous system security. The so-called vulnerability testing is to identify the penetration relationship of threat vulnerabilities, and strengthen the security protection based on the threat penetration on the existing basis, so as to improve the performance of information security protecti...

AI Technical Summary

Problems solved by technology

[0003] In traditional technical solutions, usually only the triggering activity of threat behavior itself is considered to make threat penetration vulnerability decision-making. The accuracy of decision-making affects the effectiveness of security protection reinforcement.

Images