Language model analysis method and device for threats, medium and electronic equipment

The invention provides a language model analysis method for threats, which comprises the following steps: acquiring threat intelligence, and judging the type of the threat intelligence; selecting an information extraction mode for performing language model analysis on the threat intelligence accordi...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: ZHOU YINGHAI, TIAN ZHIHONG, SUN YANBIN, XU TIANFU, QIU RIXUAN, CUI YU, LI MOHAN, ZHENG, ZHIBIN, LIU YUAN, QIU JING, LU HUI, WANG RUI, HE QUN
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention provides a language model analysis method for threats, which comprises the following steps: acquiring threat intelligence, and judging the type of the threat intelligence; selecting an information extraction mode for performing language model analysis on the threat intelligence according to the type of the threat intelligence; performing information extraction on the threat intelligence by applying the selected information extraction mode; and obtaining an information extraction result so as to obtain a threat knowledge graph corresponding to the threat intelligence. By applying the method, information can be efficiently extracted and integrated from a large amount of unstructured network threat intelligence, the information processing efficiency is improved, and the recognition and analysis capability on APT attacks is enhanced; abnormal behaviors in a network can be quickly identified, and response can be made in time, so that the risk of network attacks is effectively reduced; by fusing the k