基于知识图谱的网络攻击预测方法研究及应用  

Research and application of network attack prediction method based on knowledge graph

作　　者：黄智勇 刘昕宇 林仁明 余雅宁 张凤荔[1] HUANG Zhiyong;LIU Xinyu;LIN Renming;YU Yaning;ZHANG Fengli(School of Information and Software Engineering,University of Electronic Science and Technology of China,Chengdu 610054,China;Information Center,Sichuan Provincial Market Supervision Administration,Chengdu 610017,China)

机构地区：[1]电子科技大学信息与软件工程学院,四川成都610054 [2]四川省市场监督管理局信息中心,四川成都610017

出　　处：《现代电子技术》2024年第9期91-96,共6页Modern Electronics Technique

摘　　要：针对网络攻击知识图谱,同时引入了时序信息,提出一种基于知识图谱的网络攻击预测方案,并对其进行应用。通过对网络攻击知识图谱进行规则学习和应用,能够有效地得到网络攻击事件预测结果,为网络安全运维人员提供决策支持。以企业提供的网络安全运维知识图谱为例,将文中研究的方法应用到企业安全检测系统,结果证明该方法具有充分的准确性和可行性,同时为后续研究提供了思路。This paper focuses on the knowledge graph of network attacks.The temporal information is introduced,and a network attack prediction approach based on knowledge graph is proposed and applied in practice.By regular learning and application of the knowledge graph of network attacks,effective prediction results of network attack events can be obtained,which provides decision support for the network security operation and maintenance personnel.The knowledge graph of network security operation and maintenance provided by a certain enterprise is taken as an example.The proposed method is applied to the security detection system of the enterprise.The results demonstrate that the method is of high accuracy and feasibility,and can provide insights for the future research.

关 键 词：网络安全 知识图谱 时序知识图谱 知识图谱推理 链接预测 网络攻击 随机游走 攻击规则 

分 类 号：TN915.08-34[电子电信—通信与信息系统] TP391[电子电信—信息与通信工程]