Container abnormal behavior processing method and device

The embodiment of the invention provides a container abnormal behavior processing method and device. The method comprises the steps that anomaly detection is conducted on an obtained behavior log of a container; if the abnormal behavior is detected, generating a corresponding decision result according to the abnormal behavior through a set abnormal decision strategy; and the container is subjected to exception processing according to the decision result, so that exception analysis can be performed from the behavior of the container, the accuracy of safety protection is improved, and the confidentiality, integrity, reliability and availability of information are ensured. 本发明实施例提供了一种容器异常行为处理方法和装置，所述方法包括：对获取的容器的行为日志进行异常检测；若检测到异常行为，通过设置的异常决策策略，根据异常行为生成对应的决策结果；根据决策结果对容器进行异常处理，能够从容器的行为进行异常分析，提高安全防护的准确性，从而保证信息的保密性、完整性、可靠性和可用性。