WEB violation operation behavior detection method based on data mining clustering analysis

The invention discloses a WEB violation operation behavior detection method based on data mining clustering analysis. The method comprises the steps of merging related requests through a data mining algorithm and clustering analysis, and determining different requests of different service modules; determining use conditions of related services where the related service data of the service system is located, and calculating a mapping relationship between the service data and a service module; identifying and classifying different service modules, and determining weight values of different services; and detecting WEB user violation behaviors. According to the invention, the defects that the service data are protected and the service handling behavior is standardized by encrypting the servicedata and controlling the account permission and that a legal user cannot be effectively checked and found to obtain the service data by utilizing the logic vulnerability of the service and carry outviolation operation are ov