Data monitoring processing method and device, computer equipment and storage medium
The invention relates to a data monitoring processing method for data security, and the method comprises the steps: detecting the outgoing data flow of a mirror image port in a process that an application server processes a resource obtaining request through an observation port, and obtaining the mi...
Gespeichert in:
1. Verfasser: | |
---|---|
Format: | Patent |
Sprache: | chi ; eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | The invention relates to a data monitoring processing method for data security, and the method comprises the steps: detecting the outgoing data flow of a mirror image port in a process that an application server processes a resource obtaining request through an observation port, and obtaining the mirror image data of the resource obtaining request according to a request identification; performingrisk analysis on the mirror image data through the data monitoring model to generate an analysis result; if the risk label exists in the analysis result, performing access chain restoration on the resource acquisition request and generating access chain data; performing abnormal behavior analysis on the resource acquisition request according to the mirror image data and the access chain data to obtain abnormal behavior information; if the request abnormal behavior exists in the abnormal behavior information, intercepting the resource acquisition request; and if an attack abnormal behavior exists in the abnormal behavi |
---|