Network security defense method and device for dealing with threat development and application

The invention provides a network security defense method and device for dealing with threat development and application, and relates to the technical field of network security protection. The processing method comprises the following steps: acquiring a threat process in a network and threat information corresponding to a threat operation in the threat process; the threat information comprises threat time, threat operation and a threat object; and obtaining a corresponding relationship between the threat operation and the threatened object through the threat information, and configuring a threat defense scheme for defense based on the corresponding relationship. According to the method, the specific threat process is positioned through the threat information, the corresponding relation between the threat operation and the threat object in the threat process is further analyzed, a proper threat defense scheme is matched for defense according to the corresponding relation, and the threat defense effect is achiev