| 注册
首页|期刊导航|信息安全研究|基于图挖掘的黑灰产运作模式可视分析

基于图挖掘的黑灰产运作模式可视分析

尚思佳 陈晓淇 林靖淞 林睫菲 李臻 刘延华

信息安全研究2024,Vol.10Issue(1):48-54,7.
信息安全研究2024,Vol.10Issue(1):48-54,7.DOI:10.12379/j.issn.2096-1057.2024.01.08

基于图挖掘的黑灰产运作模式可视分析

Visual Analysis of Operation Mode of Black and Grey Production Based on Graph Mining

尚思佳 1陈晓淇 2林靖淞 2林睫菲 3李臻 2刘延华2

作者信息

  • 1. 中国科学院信息工程研究所物联网信息安全技术北京市重点实验室 北京 100093||中国科学院大学网络空间安全学院 北京 100049
  • 2. 福州大学计算机与大数据学院 福州 350108
  • 3. 国网信通亿力科技有限责任公司 福州 350003
  • 折叠

摘要

Abstract

To analyze the network assets controlled by black and grey production gangs and their associated relationships in the network asset mapping data,this paper proposes a graph mining-based visual analysis method for the black and grey production operation mode.Firstly,it identifies potential gang clues within the network asset mapping data.Secondly,it mines the network asset subgraphs held by the same black and grey production gang using these clues and black and grey production business rules,identifying core assets and key links within these subgraphs.Finally,a visual analysis system is developed based on the marked subgraphs,featuring core assets and key links related to black and grey production.It enables the exploration of network assets held by black and grey production gangs and their associated relationships,assisting analysts in formulating strategies to combat black and grey network assets.Experimental validation demonstrates the effectiveness and intuitiveness of the proposed method in analyzing and discovering black and grey production gangs and their network asset associations,providing essential technical support for monitoring the operations of the black and grey business network.

关键词

黑灰产/网络资产/子图挖掘/关键链路/可视分析

Key words

black and grey production/network assets/subgraph mining/critical link/visual analysis

分类

信息技术与安全科学

引用本文复制引用

尚思佳,陈晓淇,林靖淞,林睫菲,李臻,刘延华..基于图挖掘的黑灰产运作模式可视分析[J].信息安全研究,2024,10(1):48-54,7.

基金项目

国家自然科学基金项目(62072109,U1804263) (62072109,U1804263)

福建省自然科学基金项目(2021J01625,2021J01616) (2021J01625,2021J01616)

福建省科技重大专项(科教联合)(2021HZ022007) (科教联合)

信息安全研究

OA北大核心CSTPCD

2096-1057

访问量2
|
下载量0
段落导航相关论文