Abnormal operation behavior detection method and device, equipment and storage medium
The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the...
Gespeichert in:
| Hauptverfasser: | , , , , , , , , , , , |
|---|---|
| Format: | Patent |
| Sprache: | chi ; eng |
| Schlagworte: | |
| Online-Zugang: | Volltext bestellen |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| container_end_page | |
|---|---|
| container_issue | |
| container_start_page | |
| container_title | |
| container_volume | |
| creator | JIN YE ZHAO LIJUN ZHU WEI XU RUI LIU FEI LI DONGPEI ZHANG HAO WANG MEIYU SHEN SONG WANG KE DING YINGRUI FENG JIANGXUAN |
| description | The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the structured query statement in the first original log, determining the number of various user operation behaviors in each unit time period in the first time range; determining a time period abnormal score of each unit time period according to the frequency of each type of user operation behaviors of each unit time period; performing ordered weighted arithmetic average on the time period abnormal score by adopting an ordered weighted average operator, and determining a data abnormal score of the target user in the first time range; and determining whether the target user has an abnormal operation behavior according to the data exception score. By converting the operation behavior times of various users into the data |
| format | Patent |
| fullrecord | <record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_CN114661568A</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>CN114661568A</sourcerecordid><originalsourceid>FETCH-epo_espacenet_CN114661568A3</originalsourceid><addsrcrecordid>eNqNyrEKwjAURuEsDqK-Q9x1CGpwLUVxctK53Ca_NtDkxiTt81uKD-B04OMsxbNqAydPveSIRMVxkC06Gh0naVFgZvIoHVtJwU44OoOdxGdw0SOUWXPhRG9Mo3WDX4vFi_qMza8rsb1eHvVtj8gNciSDgNLUd6WOWquTPleHf54v-iQ5ZQ</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>Abnormal operation behavior detection method and device, equipment and storage medium</title><source>esp@cenet</source><creator>JIN YE ; ZHAO LIJUN ; ZHU WEI ; XU RUI ; LIU FEI ; LI DONGPEI ; ZHANG HAO ; WANG MEIYU ; SHEN SONG ; WANG KE ; DING YINGRUI ; FENG JIANGXUAN</creator><creatorcontrib>JIN YE ; ZHAO LIJUN ; ZHU WEI ; XU RUI ; LIU FEI ; LI DONGPEI ; ZHANG HAO ; WANG MEIYU ; SHEN SONG ; WANG KE ; DING YINGRUI ; FENG JIANGXUAN</creatorcontrib><description>The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the structured query statement in the first original log, determining the number of various user operation behaviors in each unit time period in the first time range; determining a time period abnormal score of each unit time period according to the frequency of each type of user operation behaviors of each unit time period; performing ordered weighted arithmetic average on the time period abnormal score by adopting an ordered weighted average operator, and determining a data abnormal score of the target user in the first time range; and determining whether the target user has an abnormal operation behavior according to the data exception score. By converting the operation behavior times of various users into the data</description><language>chi ; eng</language><subject>CALCULATING ; COMPUTING ; COUNTING ; ELECTRIC DIGITAL DATA PROCESSING ; PHYSICS</subject><creationdate>2022</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&date=20220624&DB=EPODOC&CC=CN&NR=114661568A$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,308,780,885,25563,76418</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&date=20220624&DB=EPODOC&CC=CN&NR=114661568A$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>JIN YE</creatorcontrib><creatorcontrib>ZHAO LIJUN</creatorcontrib><creatorcontrib>ZHU WEI</creatorcontrib><creatorcontrib>XU RUI</creatorcontrib><creatorcontrib>LIU FEI</creatorcontrib><creatorcontrib>LI DONGPEI</creatorcontrib><creatorcontrib>ZHANG HAO</creatorcontrib><creatorcontrib>WANG MEIYU</creatorcontrib><creatorcontrib>SHEN SONG</creatorcontrib><creatorcontrib>WANG KE</creatorcontrib><creatorcontrib>DING YINGRUI</creatorcontrib><creatorcontrib>FENG JIANGXUAN</creatorcontrib><title>Abnormal operation behavior detection method and device, equipment and storage medium</title><description>The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the structured query statement in the first original log, determining the number of various user operation behaviors in each unit time period in the first time range; determining a time period abnormal score of each unit time period according to the frequency of each type of user operation behaviors of each unit time period; performing ordered weighted arithmetic average on the time period abnormal score by adopting an ordered weighted average operator, and determining a data abnormal score of the target user in the first time range; and determining whether the target user has an abnormal operation behavior according to the data exception score. By converting the operation behavior times of various users into the data</description><subject>CALCULATING</subject><subject>COMPUTING</subject><subject>COUNTING</subject><subject>ELECTRIC DIGITAL DATA PROCESSING</subject><subject>PHYSICS</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2022</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNqNyrEKwjAURuEsDqK-Q9x1CGpwLUVxctK53Ca_NtDkxiTt81uKD-B04OMsxbNqAydPveSIRMVxkC06Gh0naVFgZvIoHVtJwU44OoOdxGdw0SOUWXPhRG9Mo3WDX4vFi_qMza8rsb1eHvVtj8gNciSDgNLUd6WOWquTPleHf54v-iQ5ZQ</recordid><startdate>20220624</startdate><enddate>20220624</enddate><creator>JIN YE</creator><creator>ZHAO LIJUN</creator><creator>ZHU WEI</creator><creator>XU RUI</creator><creator>LIU FEI</creator><creator>LI DONGPEI</creator><creator>ZHANG HAO</creator><creator>WANG MEIYU</creator><creator>SHEN SONG</creator><creator>WANG KE</creator><creator>DING YINGRUI</creator><creator>FENG JIANGXUAN</creator><scope>EVB</scope></search><sort><creationdate>20220624</creationdate><title>Abnormal operation behavior detection method and device, equipment and storage medium</title><author>JIN YE ; ZHAO LIJUN ; ZHU WEI ; XU RUI ; LIU FEI ; LI DONGPEI ; ZHANG HAO ; WANG MEIYU ; SHEN SONG ; WANG KE ; DING YINGRUI ; FENG JIANGXUAN</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_CN114661568A3</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>chi ; eng</language><creationdate>2022</creationdate><topic>CALCULATING</topic><topic>COMPUTING</topic><topic>COUNTING</topic><topic>ELECTRIC DIGITAL DATA PROCESSING</topic><topic>PHYSICS</topic><toplevel>online_resources</toplevel><creatorcontrib>JIN YE</creatorcontrib><creatorcontrib>ZHAO LIJUN</creatorcontrib><creatorcontrib>ZHU WEI</creatorcontrib><creatorcontrib>XU RUI</creatorcontrib><creatorcontrib>LIU FEI</creatorcontrib><creatorcontrib>LI DONGPEI</creatorcontrib><creatorcontrib>ZHANG HAO</creatorcontrib><creatorcontrib>WANG MEIYU</creatorcontrib><creatorcontrib>SHEN SONG</creatorcontrib><creatorcontrib>WANG KE</creatorcontrib><creatorcontrib>DING YINGRUI</creatorcontrib><creatorcontrib>FENG JIANGXUAN</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>JIN YE</au><au>ZHAO LIJUN</au><au>ZHU WEI</au><au>XU RUI</au><au>LIU FEI</au><au>LI DONGPEI</au><au>ZHANG HAO</au><au>WANG MEIYU</au><au>SHEN SONG</au><au>WANG KE</au><au>DING YINGRUI</au><au>FENG JIANGXUAN</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>Abnormal operation behavior detection method and device, equipment and storage medium</title><date>2022-06-24</date><risdate>2022</risdate><abstract>The invention provides an abnormal operation behavior detection method and device, equipment and a storage medium. According to the specific scheme, the method comprises the steps of collecting a first original log of operating a database by a target user within a first time range; according to the structured query statement in the first original log, determining the number of various user operation behaviors in each unit time period in the first time range; determining a time period abnormal score of each unit time period according to the frequency of each type of user operation behaviors of each unit time period; performing ordered weighted arithmetic average on the time period abnormal score by adopting an ordered weighted average operator, and determining a data abnormal score of the target user in the first time range; and determining whether the target user has an abnormal operation behavior according to the data exception score. By converting the operation behavior times of various users into the data</abstract><oa>free_for_read</oa></addata></record> |
| fulltext | fulltext_linktorsrc |
| identifier | |
| ispartof | |
| issn | |
| language | chi ; eng |
| recordid | cdi_epo_espacenet_CN114661568A |
| source | esp@cenet |
| subjects | CALCULATING COMPUTING COUNTING ELECTRIC DIGITAL DATA PROCESSING PHYSICS |
| title | Abnormal operation behavior detection method and device, equipment and storage medium |
| url | https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-01-09T03%3A33%3A36IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=JIN%20YE&rft.date=2022-06-24&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3ECN114661568A%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true |