Network security event response method, device and equipment

The invention relates to a network security event response method, device and equipment, and the method comprises the steps: obtaining a network security event; when it is detected that the type of the network security event is a network attack event, performing matching according to attack source information of the network attack event and an attack record, and determining the number of attacks corresponding to the attack source information; if the number of attacks meets the triggering condition, carrying out linkage processing on the network attack event; and if the number of attacks does not meet the triggering condition, matching with a feature library according to the feature information of the network attack event, determining emergency response information corresponding to the feature information, and responding to the network attack event according to the emergency response information. According to the technical scheme provided by the invention, the automatic linkage processing of the network attack