Abnormal operation behavior detection method and device, equipment and storage medium

The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: JIN YE, ZHAO LIJUN, ZHU WEI, XU RUI, LIU FEI, LI DONGPEI, ZHANG HAO, WANG MEIYU, SHEN SONG, WANG KE, DING YINGRUI, FENG JIANGXUAN
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the structured query statement in the first original log, determining the number of various user operation behaviors in each unit time period in the first time range; determining a time period abnormal score of each unit time period according to the frequency of each type of user operation behaviors of each unit time period; performing ordered weighted arithmetic average on the time period abnormal score by adopting an ordered weighted average operator, and determining a data abnormal score of the target user in the first time range; and determining whether the target user has an abnormal operation behavior according to the data exception score. By converting the operation behavior times of various users into the data