基于大数据域名威胁情报特征挖掘和分析研判
Journal: Advances in Computer and Autonomous Intelligence Research DOI: 10.12238/acair.v2i3.8601
Abstract
随着网络技术的发展,万物互联时代的网络安全挑战日益严峻。对威胁情报的需求愈发迫切。本文以域名类失陷指标(Indicators of Compromise,IOC)为例,探讨如何通过威胁情报提升网络安全防御体系的自动化和智能化。利用Virus Total平台的数据资源,本文采用数据驱动方法,构建特征工程机制,实现IOC标签的自动化标注。通过专家规则和有监督模型,对IOC的信誉和威胁类别进行分类预测,验证模型的泛化能力。本研究为网络安全防御提供了新的视角和实践指导,有助于应对网络空间的安全挑战,推动网络环境的健康发展。通过深入分析和应用威胁情报,可以更有效地提升威胁检测和应急响应的效率,构建智能化的网络安全防御体系。
Keywords
网络安全；安全威胁情报；失陷指标；数据挖掘；特征工程
Full Text
PDF - Viewed/Downloaded: 0 TimesReferences
[1] 杨沛安,武杨,苏莉娅,等.网络空间威胁情报共享技术综述[J].计算机科学,2018,45(06):9-18+26.
[2] Palacin V.Practical threat intelligence and data-driven threat hunting[M]. Packt Publishing,2021.
[3] Gong S,Lee C.Cyber threat intelligence framework for incident response in an energy cloud platform[J].Electronics, 2021,10(3):239.
[4] Gao P,Liu X,Choi E,etal.A system for automated opensource threat intelligence gathering and management[C]//Proc eedings of the 2021International Conference on Management of Data.2021:2716-2720.
[5] Zhu S,Zhang Z,Yang L,etal. Benchmarking label dynamics of VirusTotal engines[C]//Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security.2020:2081-2083.
[6] 高雅丽.面向大数据的网络威胁情报可信感知关键技术研究[D].北京邮电大学,2020.
[2] Palacin V.Practical threat intelligence and data-driven threat hunting[M]. Packt Publishing,2021.
[3] Gong S,Lee C.Cyber threat intelligence framework for incident response in an energy cloud platform[J].Electronics, 2021,10(3):239.
[4] Gao P,Liu X,Choi E,etal.A system for automated opensource threat intelligence gathering and management[C]//Proc eedings of the 2021International Conference on Management of Data.2021:2716-2720.
[5] Zhu S,Zhang Z,Yang L,etal. Benchmarking label dynamics of VirusTotal engines[C]//Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security.2020:2081-2083.
[6] 高雅丽.面向大数据的网络威胁情报可信感知关键技术研究[D].北京邮电大学,2020.
Copyright © 2024 陈志浩, 张世同, 盈广明
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License