Attack event analysis method and device, equipment and storage medium

The embodiment of the invention discloses an attack event analysis method and device, equipment and a storage medium. The method comprises the steps of obtaining event information of at least one attack event; associating the attack events by applying associated event screening conditions correspond...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: XU JIAN, LYU ZHUOHANG, GAO CHUAN, LEI JUN, ZHOU YU, ZHANG YUPENG
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The embodiment of the invention discloses an attack event analysis method and device, equipment and a storage medium. The method comprises the steps of obtaining event information of at least one attack event; associating the attack events by applying associated event screening conditions corresponding to event types in respective event information of the at least one attack event, and determining at least one associated event group; for each associated event group, executing the following operations to determine an attack parameter set in each associated event group: determining a first attack scene of a first associated event group; the first associated event group is any associated event group in the at least one associated event group; the merging condition corresponding to the first attack scene is applied to merge the at least two attack events in the first association event group to obtain the merged attack parameter set, and the merged attack parameter set is used as the attack information to analyze