Data monitoring processing method and device, computer equipment and storage medium

The invention relates to a data monitoring processing method for data security, and the method comprises the steps: detecting the outgoing data flow of a mirror image port in a process that an application server processes a resource obtaining request through an observation port, and obtaining the mi...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
1. Verfasser: ZHANG PEIFAN
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention relates to a data monitoring processing method for data security, and the method comprises the steps: detecting the outgoing data flow of a mirror image port in a process that an application server processes a resource obtaining request through an observation port, and obtaining the mirror image data of the resource obtaining request according to a request identification; performingrisk analysis on the mirror image data through the data monitoring model to generate an analysis result; if the risk label exists in the analysis result, performing access chain restoration on the resource acquisition request and generating access chain data; performing abnormal behavior analysis on the resource acquisition request according to the mirror image data and the access chain data to obtain abnormal behavior information; if the request abnormal behavior exists in the abnormal behavior information, intercepting the resource acquisition request; and if an attack abnormal behavior exists in the abnormal behavi