Host login security detection method, system and device and storage medium

The invention discloses a host login security detection method, system and device and a storage medium. The method comprises the steps of obtaining a host login event and a host operation log; obtaining user login information according to the host login event, and obtaining a user operation link according to the host operation log; generating a user behavior portrait according to the user login information and the user operation link; and determining that the host login event is an abnormal login event according to the user behavior portrait, and issuing an abnormal login alarm according to apreset host login alarm strategy. According to the invention, the user behavior portrait is constructed through the host login event and the host operation log, and whether the current host login event is an abnormal login event is judged according to the user behavior portrait, so that security detection can be carried out on local login and remote login bypassing the management system; accuracyand comprehensiveness of h