Network attack detection method, device, equipment, medium and program

The invention relates to the technical field of network security, in particular to a network attack detection method and device, equipment, a medium and a program. The method comprises the following steps: collecting flow characteristics of a data stream when a ground base station transmits data to a satellite, and determining current spatio-temporal information of the satellite; determining a target reference traffic feature corresponding to the current spatio-temporal information from a mapping relationship between the spatio-temporal information and a reference traffic feature; and comparing the traffic characteristics with the target reference traffic characteristics, and determining whether the satellite network suffers from the target attack based on a comparison result. Through the method, whether the satellite network suffers from the target attack can be detected. 本申请涉及网络安全技术领域，具体涉及一种网络攻击的检测方法、装置、设备、介质及程序。该方法包括：采集地面基站向卫星进行数据传输时数据流的流量特征，并确定所述卫星当前的时空信息；从时空信息与基准流量特征的映射关系中，确定所述当前的时空信息对应的目标基准流量特征；将所述流量特征与