The embodiment of the application discloses a network security situation prediction method, device, equipment and storage medium. The method comprises the following steps: acquiring log data of a network security event; acquiring a strong rule set according to the log data of the network security event; and prejudging the network attack according to the strong rule set. Through the network security situation prediction method provided by the application, the network attach can be prejudged through the established strong rule set, and the network security is improved.