基于安全大模型的网络安全威胁检测框架研究

CYBERSECURITY THREAT DETECTION FRAMEWORK BASED ON SECURITYGPT

  • 摘要: 针对网络安全风险检测领域存在的难以定位真实攻击、研判处置效率低、安全人员技术要求高等问题,提出一种基于安全大模型的威胁检测框架,通过语料库构建、模型预测、指令微调、模型推理加速等手段构建一套性能优秀的网络安全垂直领域生成式人工智能大模型。在此基础上,为进一步提升模型准确率与检测效率,围绕安全大模型与传统规则模型、机器学习小模型开展多维协同研究,构建三位一体的网络安全威胁检测框架,并在实际业务环境中进行测试。实验结果表明,该框架可以保证网络风险平均检出率达到95%以上,误报率低于5%,同时极大提高检测效率、降低人力成本,拥有良好的应用价值。

     

    Abstract: In response to the challenges in the field of cybersecurity risk detection, such as the difficulty in pinpointing genuine attacks, low efficiency in risk assessment, judgment and disposal, and the high technical requirements for security personnel, a deep threat detection framework based on a SecurityGPT is proposed. This paper constructed a high-performing generative artificial intelligence large model tailored for the vertical domain of cybersecurity through corpus construction, model pre-training, instruction fine-tuning, and model inference acceleration. On this foundation, to further enhance the accuracy and detection efficiency of the model, a multi-dimensional collaborative research was conducted focusing on the integration of the security large model with traditional rule-based models and small-scale machine learning models. This initiative aimed to establish a tripartite deep threat detection architecture and tested in actual business environments. Experimental results show that this framework can ensure an average network risk detection rate of over 95% with a false positive rate below 5%, while significantly improving detection efficiency and reducing labor costs, demonstrating excellent application value.

     

/

返回文章
返回