Abnormal operation behavior detection method and device, equipment and storage medium
The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the...
Gespeichert in:
Hauptverfasser: | , , , , , , , , , , , |
---|---|
Format: | Patent |
Sprache: | chi ; eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the structured query statement in the first original log, determining the number of various user operation behaviors in each unit time period in the first time range; determining a time period abnormal score of each unit time period according to the frequency of each type of user operation behaviors of each unit time period; performing ordered weighted arithmetic average on the time period abnormal score by adopting an ordered weighted average operator, and determining a data abnormal score of the target user in the first time range; and determining whether the target user has an abnormal operation behavior according to the data exception score. By converting the operation behavior times of various users into the data |
---|